Principal Security Engineer

About Us:

DriveWealth is on a mission to make investing easier. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices.

There's never been a better time to build a category-defining business. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.

About the Role:

DriveWealth LLC is seeking a highly motivated and experienced Principal Security Engineer to design, build, and mature security capabilities across our brokerage platform and corporate environment. Reporting to the Head of Security Engineering, you will serve as a senior technical leader, own complex engineering initiatives, and shape the architecture and implementation of controls that support the firm's growth, protect client and consumer data, and meet or exceed regulatory obligations.

In this hands-on role, you will secure our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology. You will also build and maintain the platforms and services used by Security Operations, provide security consulting to business leaders and other engineers, and partner with Engineering, IT, Risk, and Compliance.

What You'll Do:

• Architecture Standards: Design and assist in the implementation of reusable security patterns and automated guardrails across product and corporate systems.
• Engineering Delivery: Own complex initiatives from design and testing through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements.
• Technical Leadership: Mentor engineers, conduct design and code reviews, and document architectures and runbooks.
• Cloud & Network Security: Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure.
• Endpoint & Identity: Harden Windows and macOS, tune endpoint protection, and automate Okta and JumpCloud identity and device controls. Strengthen privileged access and phishing-resistant authentication.
• Application & Container Security: Embed threat modeling, API security, security testing, image signing, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows.
• Exposure Management: Automate code, dependency, container, and infrastructure scanning. Partner with Engineering and IT to prioritize remediation and prevent recurring vulnerabilities.
• Security Platforms: Build, integrate, and maintain SIEM, SOAR, endpoint security, and vulnerability management services.
• Detection & Automation: Engineer telemetry collection, normalization, and enrichment. Develop and validate analytics queries, detections, and automated response playbooks.
• Incident Engineering: Provide subject matter expertise in threat hunting and incidents. Deliver containment automation and lead post-incident hardening.
• Compliance Automation: Translate requirements defined with Legal, Compliance, and GRC into tested technical controls, including SEC Rule 17a-3 and 17a-4 recordkeeping capabilities. Automate evidence collection and support audits.
• Data Security & Privacy: Build and maintain data discovery, classification, access control, encryption, retention, and secure deletion capabilities to support GDPR and other privacy requirements.

You Bring:

• 10+ years of relevant security, software, or infrastructure engineering experience, with a track record leading complex security initiatives from architecture through production operation.
• Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
• Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS.
• Experience with Okta, JumpCloud, or comparable platforms is preferred.
• Strong software and automation skills in Python or a comparable language and practical experience with Terraform, CI/CD, GitOps, and security as code.
• Experience building and operating security platforms, telemetry pipelines, detections, and response automation.
• Sound architectural judgment, strong troubleshooting skills, and the ability to prioritize risk, influence cross-functional decisions, and mentor technical colleagues.
• Experience in regulated financial services or another environment with demanding availability and audit requirements. Familiarity with NIST CSF or SP 800-53 is required. Brokerage, SEC/FINRA, and privacy compliance experience are preferred.
• Bachelor's degree in a related field or equivalent practical experience. Relevant security, AWS, Kubernetes, or GIAC certifications are a plus.

Location:

This role is open to candidates in New York City, Chicago, Austin, Dallas, Denver, Miami, San Francisco Bay Area, or Seattle.

• If based in New York or Chicago: This role is expected to come into the office on a cadence set by the Hiring Manager/Team.
• If based in Austin, Dallas, Denver, Miami, San Francisco, or Seattle: This is a fully remote role, though you may need to visit onsite offices from time to time.
• Applicants must be authorized to work for any employer in the U.S. DriveWealth does not sponsor or take over sponsorship of an employment visa at this time.

Pay Range:

$215,000 - $235,000 USD

Compensation:

This role is eligible for base, bonus, equity, 401(k) match, and heavily subsidized benefits and perks, including Medical, Dental, Vision, and Disability insurance, Paid Parental Leave, wellness reimbursement, a company-provided phone, a personal development allowance, and generous Paid Time Off and observed holidays.

Work Authorization:

Applicants must possess the legal right to work in the country where the position is located at the time of application. DriveWealth does not provide visa sponsorship or support for employment authorization at this time.

How We Think About AI:

We leverage AI to work smarter and move faster. We seek AI-curious talent who are proactive about using emerging tools to increase signal quality, reduce friction, and improve outcomes.

Equal Employment Opportunity:

We are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply.

Agency Disclaimer:

DriveWealth does not accept agency resumes. Do not forward resumes to our jobs alias, employees, or any other organization location. DriveWealth is not responsible for any fees related to unsolicited resumes.