Principal Security Engineer

Altruist • San Francisco, CA

9d • $226,000 - $300,000 • Hybrid

About The Position

Altruist is in the midst of an exciting phase and we’re excited to hire a Principal Security Engineering / Security Architect to define secure-by-design architecture across our cloud, applications, and identity platforms. You’ll set the patterns and standards that let us scale a self-clearing broker-dealer safely. This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

Requirements

• 10+ years in security with significant time in a security architecture or senior engineering role
• Deep experience securing AWS and Kubernetes at scale
• Strong application security and secure-design / threat-modeling background
• Working knowledge of cryptography and key management
• Experience defining zero-trust and identity architecture
• A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
• Technologically savvy and fluent across modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, AWS, etc.)
• Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
• Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others.
• Resilience - We’re inspired by your unwavering determination to achieve success, no matter the adversity you face along the way.
• Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives.
• Creative problem solving - Identifying the problem is simply not enough. You’re instinctually creative with your approach in finding solutions to roadblocks.

Nice To Haves

• Experience working in regulated environments (SEC/FINRA, fintech, or clearing/broker-dealer)
• Experience with cryptographic isolation / envelope encryption or searchable encryption
• Relevant certifications (e.g., CISSP, CCSP, SABSA)

Responsibilities

• Own security architecture and reusable reference patterns across our AWS environment, Kubernetes (EKS), and Java/Spring platform.
• Lead security design reviews and threat modeling for new products and services
• Define standards for encryption and key management, identity and zero trust, network segmentation, and service-to-service authentication/authorization.
• Drive our encryption strengthening program and cloud guardrails
• Partner with Engineering, Cloud, and IT to embed security into the SDLC and infrastructure by default.
• Advise on security architecture for strategic initiatives, integrations, and framework alignment.

Benefits

• Competitive total compensation.
• Premium healthcare, dental, and vision insurance plans (HMO and PPO).
• 401k savings plan with a 4% match and immediate vesting.
• 16 week paid parental leave after one year of employment.
• Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
• Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
• Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home-purchasing preparedness, etc.).
• One month work from anywhere policy (with the exception of a few countries).
• Bonus program for eligible roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: Associate degree