Principal Security Engineer

WHO IS the company AND WHAT DO WE DO?

The company is the first complete platform for modern Accounting Firms. Backed by top-tier investors like Bessemer, KKR, and Revolution, we build category-defining technology, and we're doing it with world-class people, processes, and products.

To learn more, visit our website [link for members]

We work with the majority of the Top 500 firms in the country. We're replacing brittle, decades-old accounting practice management systems with software accounting firms can actually trust, and we have rare product-market fit in an industry that's about to change permanently.

About the Role

We're looking for a Principal Security Engineer to help strengthen and mature engineering security at the company.

This is a hands-on technical leadership role focused on securing our SaaS platform, development infrastructure, and software delivery systems. You'll partner closely with engineering leadership and teams to identify risks, improve security practices, and build the tooling and automation needed to make secure development easier.

You'll play a key role in advancing our engineering security capabilities, with a particular focus on software supply chain security, vulnerability management, and secure development practices. Working alongside engineering leadership, you'll help shape our security strategy and drive the technical initiatives that support it.

We're looking for a strong engineer with security expertise, sound judgment, and a willingness to tackle new challenges. You don't need to know everything, but you should be comfortable taking ownership, learning quickly, and turning security challenges into practical solutions.

WHAT YOU'LL DO

• Software Supply Chain Security: Improve security across our CI/CD pipelines, build infrastructure, dependencies, and deployment processes. Help establish secure, reliable software delivery practices.

• Vulnerability Management: Own and improve our vulnerability scanning and remediation capabilities, including tooling, automation, prioritization, and integration into engineering workflows.

• Product & SaaS Security: Partner with engineering teams to strengthen application, cloud, and infrastructure security. Help address risks around customer data, access controls, APIs, and third-party integrations.

• Security Architecture: Lead threat modeling and security reviews for critical systems, helping teams identify risks and make sound architectural decisions.

• AI Security: Explore how emerging AI capabilities, including tools and models such as Daybreak and Mythos, can improve security engineering. Help teams understand and address risks introduced by AI-assisted development, agents, and LLM integrations.

• Security Strategy: Partner with engineering leadership to identify gaps, prioritize improvements, and establish practical security standards and processes.

• Technical Leadership: Own security initiatives from design through implementation, influence technical decisions, and help build security expertise across engineering.

WHAT WE'RE LOOKING FOR

• Strong engineering background in software, platform, infrastructure, or security engineering, with hands-on experience building and operating complex systems.

• Solid security fundamentals and practical experience improving security in software development, cloud infrastructure, or production environments.

• Experience with software delivery security, including CI/CD, vulnerability management, supply chain security, or related areas.

• Understanding of SaaS security, including the challenges of protecting customer data, securing applications, and operating cloud-based services.

• AI-forward mindset, with an interest in emerging AI security capabilities and an understanding of the opportunities and risks AI introduces.

• Technical leadership and ownership, with the ability to drive complex initiatives, collaborate across teams, and balance security with engineering needs.

EXPERIENCE THAT WOULD BE VALUABLE

We don't expect experience in all these areas, but familiarity with some would be helpful:

• Software supply chain security, including SLSA, SBOMs, artifact signing, or build provenance.

• Security scanning and remediation tooling, including SAST, SCA, and container scanning.

• Cloud-native security, particularly AWS and Kubernetes.

• Threat modeling, application security, identity, or secrets management.

• AI-powered security tooling and securing AI-assisted development workflows.

• Building or improving security engineering practices in a growing organization.

WHAT SUCCESS LOOKS LIKE

You'll help us build a stronger, more scalable approach to engineering security.

In your first year, you'll identify and prioritize meaningful risks, improve our software supply chain and vulnerability management capabilities, and establish security practices that fit naturally into how our teams build and operate software.

You'll bring the technical expertise, ownership, and judgment to make measurable improvements while helping security become a shared responsibility across engineering.

Interview process

We'll share a detailed interview plan with you on the intro call. The loop is designed to mirror the actual job: real artifacts to react to, conversations that look like the conversations you'd have on the team, and reference checks taken seriously. We'll move quickly when there's mutual fit.

WHY WORK AT the company?

• The big-picture value proposition of this role is simple: join us, and you'll be paid competitively to have freedom in solving worthwhile, challenging problems alongside other A-players at a fast-growing SaaS startup led by an experienced and successful team with industry experience

• AI-by-Default - you'll have access to best-in-class AI tools and work in an environment that embraces an AI-by-default mindset, where curiosity and experimentation are part of how we operate

• Remote-first organization

• Competitive compensation and benefits

• Stock options

• 401(k) matching

• Adventure Travel Stipend on each anniversary of your employment with the company

Our Values

• Relentless by Design

• Owners not Renters

• Trust at the Core

The company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

Candidate information will be treated in accordance with our CCPA privacy notice which can be found here: [link for members]