Principal Security Engineer

Aiwyn

2d•Remote

About The Position

Aiwyn is hiring a Principal Security Engineer for a hands-on technical leadership role focused on strengthening and maturing engineering security across its SaaS platform, development infrastructure, and software delivery systems. The role partners closely with engineering leadership and teams to identify risks, improve security practices, and build tooling and automation that make secure development easier. The engineer will advance engineering security capabilities, particularly in software supply chain security, vulnerability management, and secure development practices. They will help shape security strategy and lead technical initiatives, taking ownership from design through implementation while balancing security needs with engineering realities. Aiwyn builds a platform for accounting firms and works with the majority of the Top 500 firms in the United States. It is a fast-growing SaaS startup backed by Bessemer, KKR, and Revolution. The role is remote-first and offers competitive compensation and benefits, stock options, 401(k) matching, and an annual Adventure Travel Stipend. Aiwyn describes its culture as AI-by-default and emphasizes curiosity, experimentation, ownership, and trust.

Requirements

Strong engineering background in software, platform, infrastructure, or security engineering, with hands-on experience building and operating complex systems.
Solid security fundamentals and practical experience improving security in software development, cloud infrastructure, or production environments.
Experience with software delivery security, including CI/CD, vulnerability management, supply chain security, or related areas.
Understanding of SaaS security, including protecting customer data, securing applications, and operating cloud-based services.
Interest in emerging AI security capabilities and understanding of the opportunities and risks AI introduces.
Technical leadership and ownership, including the ability to drive complex initiatives, collaborate across teams, and balance security with engineering needs.

Nice To Haves

Familiarity with software supply chain security practices such as SLSA, SBOMs, artifact signing, or build provenance.
Familiarity with security scanning and remediation tooling, including SAST, SCA, and container scanning.
Familiarity with cloud-native security, particularly AWS and Kubernetes.
Familiarity with threat modeling, application security, identity, or secrets management.
Familiarity with AI-powered security tooling and securing AI-assisted development workflows.
Experience building or improving security engineering practices in a growing organization.

Responsibilities

Improve security across CI/CD pipelines, build infrastructure, dependencies, and deployment processes, and establish secure and reliable software delivery practices.
Own and improve vulnerability scanning and remediation capabilities, including tooling, automation, prioritization, and integration into engineering workflows.
Partner with engineering teams to strengthen application, cloud, and infrastructure security, addressing risks involving customer data, access controls, APIs, and third-party integrations.
Lead threat modeling and security reviews for critical systems and help teams make sound architectural decisions.
Explore how emerging AI capabilities and tools can improve security engineering, and help teams understand risks from AI-assisted development, agents, and LLM integrations.
Partner with engineering leadership to identify security gaps, prioritize improvements, and establish practical standards and processes.
Own security initiatives from design through implementation, influence technical decisions, and build security expertise across engineering.
Identify and prioritize meaningful risks, improve software supply chain security and vulnerability management, and establish security practices that fit how teams build and operate software.
Help make security a shared responsibility across engineering.