(USA) Principal, Software Engineer, Information Security

Walmart•Bentonville, AR

5d•$110,000 - $220,000•Onsite

About The Position

As a Principal Software Engineer in Information Security, you will lead the design and implementation of secure, scalable software solutions aligned with business objectives. You will collaborate with cross-functional teams and stakeholders to address complex technical challenges, drive innovation, and ensure compliance with security standards. You will guide development practices, oversee code quality, and contribute to continuous improvement, using expertise in software architecture, coding, and security frameworks to influence technical strategy and protect critical assets. The role is part of Walmart’s AI Security Team, which designs and maintains enterprise-wide security frameworks for AI-driven assets. The team addresses risks associated with Generative AI and Agentic Workflows, including prompt injection and model supply-chain challenges, and builds secure, scalable infrastructure using systems engineering, cloud migration, continuous integration, and software development practices. The position focuses on agent-system threat modeling; securing tools, MCP servers, integrations, and multi-agent communication; software supply-chain security and model governance; and working across security, legal, privacy, and product teams to establish governance and align with standards such as NIST AI RMF. The role is based at Walmart’s primary location in Bentonville, Arkansas.

Requirements

Strong proficiency in Python and coding standards, with extensive software engineering experience.
Deep understanding of information security principles, AI security, and agentic AI systems.
Ability to design scalable, secure software architectures and solutions aligned with business requirements.
Expertise in stakeholder identification, engagement, and communication to influence technical outcomes.
Skill in driving telemetry implementation, defect management, and continuous integration/continuous delivery processes.
Strong analytical skills to translate business needs into technical solutions and lead cross-functional collaboration.
Experience guiding teams on coding frameworks, testing strategies, and quality assurance best practices.
Either a bachelor’s degree in computer science, information technology, engineering, information systems, cybersecurity, or a related area and 5 years of experience in software engineering or a related area at a technology, retail, or data-driven company; or 7 years of experience in software engineering or a related area at a technology, retail, or data-driven company.

Nice To Haves

Certification in Security+, GISF, CISSP, CCSP, or GSEC.
A master’s degree in computer science, information technology, engineering, information systems, cybersecurity, or a related area and 3 years of experience leading information security or cybersecurity projects.
Background creating inclusive digital experiences, including knowledge of implementing WCAG 2.2 AA standards, assistive technologies, and integrating digital accessibility into products and services.

Responsibilities

Threat model agent systems using frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.
Secure tools, MCP servers, and integrations by reviewing tool schemas and descriptions, validating inputs and outputs, and sandboxing code execution and browsing.
Secure multi-agent and agent-to-agent communication through scoped delegation and protections against privilege escalation or injected instructions.
Support software supply-chain security and model governance, including vetting base models and fine-tunes such as open-weight derivatives.
Collaborate with security, legal, privacy, and product teams to set autonomy levels, define acceptable use, and align with standards such as NIST AI RMF.
Design and implement secure, scalable software solutions aligned with business objectives.
Guide development practices, oversee code quality, and contribute to continuous improvement.
Drive telemetry implementation, defect management, and CI/CD processes.
Guide teams on coding frameworks, testing strategies, and quality assurance practices.
Engage stakeholders and lead cross-functional collaboration to influence technical outcomes.

Benefits

Medical, vision, and dental coverage.
401(k).
Stock purchase plan.
Company-paid life insurance.
Paid time off, including sick leave, parental leave, family care leave, bereavement leave, jury duty, and voting leave.
Short-term and long-term disability.
Company discounts.
Military Leave Pay.
Adoption and surrogacy expense reimbursement.
Live Better U education benefit, with tuition, books, and fees paid for eligible programs.
Performance-based bonus awards, including annual or quarterly performance bonuses.
Stock may be available as additional compensation for certain positions.