{"id":3155161,"url":"https://alion.io/job/ascensus-principal-security-engineer-information-security","title":"Principal Security Engineer - Information Security","company":{"id":8069,"name":"Ascensus","domain":"ascensus.com","url":"https://alion.io/company/ascensus","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":218000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":103},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-19T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-26T22:22:36Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.\nSection 1: Position Summary\nAs a Principal Security Engineer, you will be a key visionary within the security engineering team, responsible for designing, implementing, and enhancing security solutions across the enterprise.\nYou will play a crucial role in shaping security strategy, leading major security initiatives, and ensuring that security technologies and processes align with business objectives, industry standards, and compliance requirements.\nThis role requires deep technical expertise, strategic thinking, problem-solving skills, and the ability to mentor junior engineers. You will collaborate with security teams (SOC, threat intelligence, architecture) and IT teams to drive security innovation and resilience across the organization.\nSection 2: Job Functions, Essential Duties and Responsibilities\nSecurity Architecture & Implementation: Design, implement, and optimize securitysolutions to protect enterprise assets, data, and systems.\nTechnology Guidance: Provide technical guidance in evaluating, selecting, and deploying security tools and frameworks.\nSecurity Engineering & Automation: Develop and implement security automation and integration across security platforms using scripting languages (Python, PowerShell, Bash).\nThreat & Vulnerability Management: Work closely with the SOC and threat teams to identify, analyze, and remediate security risks.\nCompliance & Governance: Ensure security solutions align with regulatory requirements.\nIncident Response Support: Provide advanced security engineering support for security incidents and investigations, including root cause analysis and remediation strategies. \nSecurity Program Ownership: Lead and contribute to large-scale security projects and initiatives, ensuring proper documentation, risk assessments, and successful implementation. \nResearch & Development: Stay ahead of emerging threats, security technologies, and industry trends to continuously enhance security posture. \nMentorship & Training: Mentor security engineers and provide knowledge sharing through documentation, training sessions, and hands-on guidance.\nSection 3: Experience, Skills, Knowledge Requirements\nBachelor’s or Master’s degree in Computer Science, Information Security, or a related field.\n7+ years of experience in security engineering, cybersecurity operations, or security architecture roles.\nStrong expertise in security technologies, including:\no Next Generation Firewalls (NGFW)\no Web Application Firewall (WAF)\no Endpoint Detection & Response (EDR)\no Intrusion Detection/Prevention Systems (IDS/IPS)\no Data Loss Prevention (DLP)\no Single Sign-On (SSO) & Multi-Factor Authentication (MFA)\no Security Information & Event Management (SIEM)\no Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Secure\nAccess Service Edge (SASE)\no Privileged Access Management (PAM)\no Identity & Access Management (IAM)\no Network segmentation & Zero Trust architectures\nDeep knowledge of Networking, NGFW, WAF, macro segmentation, cloud security (AWS, Azure, GCP) and modern security frameworks (e.g., Zero Trust, MITRE ATT&CK, NIST CSF, ISO 27001).\nProven experience with automation and scripting (Python, PowerShell, Bash) for security engineering and threat detection.\nStrong experience in security architecture and solution design for enterprise\nenvironments.\nExperience with performing risk assessments, threat modeling, and security controls validation.\nAdvanced knowledge of compliance.\nExcellent problem-solving, analytical thinking, and communication skills, with the ability to translate security concepts for non-technical stakeholders. \nProfessional security certifications preferred: CISSP, OSCP, CISM, CEH, GSEC, or equivalent. \nFor virtual remote positions, we require an uninterrupted workspace during business hours and an internet work speed of 25 Mbps or better. If you are unsure of your internet speed before applying, please check with your service provider.\nBe aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.","description_format":"text","description_chars":4514,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-23T14:14:11Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":0.9,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":30,"reasons":["conf:58","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/ascensus-principal-security-engineer-information-security","json_url":"https://alion.io/job/ascensus-principal-security-engineer-information-security.json","meta":{"generated_at":"2026-10-26T22:39:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30677,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8069},"rest":"https://alion.io/mcp/rest/get_company?id=8069"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fascensus-principal-security-engineer-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fascensus-principal-security-engineer-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fascensus-principal-security-engineer-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ascensus-principal-security-engineer-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fascensus-principal-security-engineer-information-security"}]}