Principal Information Security Engineer

Ovii's Interpretation of the Role

We need a hands‑on Principal Information Security Engineer to design, build, and operate security tooling and automation across our AWS‑based fintech platform. The role partners with engineering, product, legal and compliance to embed security while keeping velocity high.

Role Snapshot

• Principal‑level security engineer
• Hands‑on security tooling creator
• AWS cloud security specialist
• Cross‑functional security partner
• Fast‑paced, high‑ownership environment

Must-Have Requirements

• Systems programming language (Go, Rust, C++)
• Higher‑level language (Python, TypeScript)
• AWS infrastructure expertise
• Penetration testing / vulnerability assessment
• Security automation development
• Threat modeling
• Strong communication
• security engineering
• cloud security (AWS)
• software development with security focus

Nice-to-Have Signals

• LLM‑based or AI‑assisted security tooling
• Experience at security product companies (e.g., Wiz, Snyk, Datadog)
• Fintech / identity / fraud detection background
• Industry certifications (OSCP, OSCE, GPEN, GXPN)
• Detection engineering or SIEM platform experience
• Published security research or open‑source contributions
• Compliance framework familiarity (FedRAMP, SOC 2, PCI DSS)
• AI‑assisted security tooling
• fintech / identity verification
• security product company background

Work Setup

• Location: United States
• Work mode: REMOTE
• Remote scope: COUNTRY_RESTRICTED
• Remote countries: United States
• Employment type: Full-Time

Not Specified in JD

• Visa sponsorship
• Security clearance
• Travel requirement

What You'll Likely Work On

• Design and implement internal security tooling, including agent‑based, code analysis, and dynamic scanning solutions
• Identify and remediate vulnerabilities across application code, cloud configurations, and integrations in an AWS environment
• Develop AI‑assisted or agent‑based capabilities to scale offensive security testing
• Build automation for detection, response, and remediation across the organization
• Conduct hands‑on penetration testing and vulnerability research on infrastructure and applications
• Partner with engineering teams to embed security into development pipelines without slowing delivery
• Participate in on‑call rotation, incident response, and regular response testing
• Contribute to threat modeling and security design reviews for new cloud‑integrated systems

Good Fit If You Have

• Enjoys solving ambiguous security problems independently
• Thrives in fast‑moving, high‑ownership engineering teams
• Excels at communicating security concepts to non‑security engineers