Principal Security Engineer

Principal Security Engineer

Position Overview

Appspace is seeking a passionate and experienced Principal Security Engineer to lead complex security transformations for clients, with a strong focus on securing cloud environments. This is a hands-on, technical role requiring expertise in cloud security, software security, and penetration testing. You will guide clients through high-impact security initiatives, conduct forensic investigations across cloud platforms (AWS, Azure, GCP), and lead the design and implementation of modern security solutions.

About Appspace

At Appspace, we are dedicated to creating better work experiences for people everywhere. Our global office locations and flexible work culture support your best work, wherever and however you thrive. We foster an environment that encourages enjoyment in your work, building lasting connections, and growing your role. Join Appspace and contribute to a culture that helps people love where they work.

Responsibilities

• Lead and execute security transformation initiatives for enterprise clients, focusing on cloud security, application security, and vulnerability management.
• Serve as a primary client-facing security expert, building strong relationships and effectively communicating complex technical concepts to both technical and non-technical stakeholders.
• Architect, design, and implement robust security solutions for cloud-native and traditional applications, with a strong emphasis on AWS, Azure, or GCP.
• Conduct in-depth security assessments, penetration tests, and code reviews to identify vulnerabilities and recommend remediation strategies.
• Develop and implement secure software development lifecycles (SSDLC), integrating security best practices throughout the entire development process.
• Provide expert guidance on OWASP Top 10 vulnerabilities, secure coding practices, and threat modeling.
• Drive the adoption of automated security testing tools and processes.
• Conduct forensic investigations across cloud platforms (AWS, Azure, GCP), including containerized environments like Kubernetes.
• Configure, maintain, and remediate infrastructure, particularly within Google Cloud or Microsoft Azure, including networks, firewalls, and web application firewalls.
• Mentor and provide technical leadership to other security engineers and client teams.
• Stay abreast of the latest security trends, threats, and technologies, continuously enhancing service offerings.
• Be available on occasional nights and weekends to support the Security Operations team and be on-call in the event of any security incident.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Risk Management, or a related field (Master’s preferred).
• 10+ years of experience in information security, including securing cloud environments (Azure/GCP), application security, and security operations.
• Deep expertise in network and infrastructure security within major cloud platforms, including IAM, network configuration, and cloud-native security tools.
• Hands-on experience with vulnerability management, penetration testing, and common attack vectors; familiarity with SAST, DAST, and SCA tools.
• Strong understanding of the OWASP Top 10, secure coding principles, and cryptography.
• Solid knowledge of operating systems, file systems, memory structures, and log analysis.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Bash) to streamline investigations.
• Proficiency in forensic tools (e.g., EnCase, FTK) and evidence handling.

Application Instructions

• (No specific application instructions were provided in the original text.)

Company Information

• Company: Appspace
• Mission: Creating better work experiences for people everywhere.
• Culture: Flexible work culture, global office locations, emphasis on employee growth and connection.