Principal Security Engineer

We are seeking a Principal Security Engineer to join our team in Boulder, Colorado. The successful candidate will focus on hands-on design and implementation of security-related software to shift security left in our development processes. They will work in a lean, impact-focused environment and will be responsible for implementing security controls in SDLC, supporting shared libraries and infrastructure, and contributing to CMMC compliance.

Requirements

• 5+ years in software or security engineering, with at least 3+ years in security-focused roles
• Experience with secure cloud systems (AWS), CI/CD security, and compliance efforts (e.g., NIST, CMMC, or FedRAMP)
• Proficiency in container security (Docker/Kubernetes), security tools (e.g., Trivy, Snyk, Falco, OPA), and programming languages for tooling (Python, Rust)
• Understanding of modern attacks and defenses
• Knowledge of common threats (e.g., injection, lateral movement), controls (NIST 800-53 mappings), DevSecOps practices, SBOMs, zero-trust principles, and SIEM-integrated logging

Benefits

• Generous Paid Time Off
• 401k Matching
• Retirement Plan
• Tuition Reimbursement
• Relocation Assistance
• Employee Assistance Program (EAP)
• Employee Stock Purchase Program (ESPP)
• Family Leave
• Fitness Reimbursement
• Employee Referral Program
• Healthy snacks & beverages in every office