Consulting/Principal Security Engineer
LexisNexisRaleigh, North Carolina, United States
Posted May 6, 2026
104900 - 174700 USD
Full Time
About the Company
LexisNexis Legal & Professional is a leading global provider of legal, regulatory and business information and analytics that help customers increase productivity, improve decision-making and outcomes, and advance the rule of law around the world. We help lawyers win cases, manage their work more efficiently, serve their clients better and grow their practices. We assist corporations in better understanding their markets, monitoring their brands and competition, and in mitigating business risk. We collaborate with universities to educate students, and we support nation-building with governments and courts by making laws accessible and strengthening legal infrastructures. We partner with leading global associations and customers to collect evidence against war criminals and provide tools to combat human trafficking. LexisNexis Legal & Professional, which serves customers in more than 130 countries with 10,000 employees worldwide, is part of RELX Group, a global provider of information and analytics for professional and business customers across industries.
Job Description
Seeking a Principal Security Engineer to lead strategic technical guidance, design secure software development lifecycle, and lead security reviews for AI-powered features. The ideal candidate has 7+ years of experience in application security, security-focused software engineering, or a closely related discipline.
Requirements
- 7+ years in application security, security-focused software engineering, or a closely related discipline
- Real experience with threat modeling (STRIDE, PASTA, or your preferred framework) applied to complex, distributed systems
- Strong command of web application and API security vulnerabilities and how to actually fix them — not just how to find them
- Hands-on experience embedding SAST, DAST, SCA, and secrets scanning into developer workflows
- Enough coding ability (Python, Java, Go, TypeScript, etc.) to meaningfully review code for security issues and build lightweight automation
- Experience working in or alongside a regulated industry with real compliance requirements
- The ability to write a clear, compelling security finding — and explain it to a VP without losing them
- Strong collaboration ethos. The security team is an enabler of the business, not a hindrance
Benefits
- Generous Paid Time Off
- 401k Matching
- Annual Incentive Bonus
