Principal Information Security Engineer

ABOUT THE BRAND:

Callaway Golf Company is a premium golf equipment, gear and apparel company with a portfolio of global brands, including Callaway Golf, Odyssey, TravisMathew, and OGIO. Through an unwavering commitment to innovation and premium craftsmanship, Callaway designs, manufactures, and sells high-performance golf clubs, golf balls, apparel, bags, and other accessories-setting the standard for performance in the game of golf.

Our Mission: To create demonstrably superior and pleasingly different products powered by innovative technology and premium craftsmanship enabling golfers of all abilities to play their best and find more joy in the game.

Our company is a blend of experience and diverse backgrounds, and together we look to leave the past behind while moving the game forward. For more information, please visit https://www.callawaygolf.com

ROLES AND RESPONSIBILITIES

The Principal Information Security Engineer is accountable for the following responsibilities, executing and advancing enterprise security controls and secure solutions:

Security Operations

• Serve as a technical subject matter expert, guide cross-functional projects, and mentor junior engineers.

• Implement, operate, and continuously improve information security controls in alignment with company policies, frameworks (e.g., NIST, ISO 27001), and regulatory requirements.

• Monitor security tools and logs to detect, investigate, and respond to security events and incidents.

• Stay current on emerging threats, vulnerabilities, and security technologies, and communicate relevant risks to stakeholders.

• Perform Security Assessments: Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software.

• Incident Response Support: Assist in investigating, analyzing, and responding to security incidents related to applications, serves and endpoints, ensuring timely resolution, documentation / post mortem.

Security Architecture & Engineering

• Design, build, and deploy enterprise security controls, including firewalls, SIRM, IDS/IPS, Data Loss Prevention (DLP), and Privileged Access Management (PAM).

• Maintain security documentation, including policies, procedures, runbooks, and training materials.

• Strong background in network protocols, firewalls, and endpoint protection tools.

Application Security

• Security Foundations: Expert level knowledge on Web Application Security, Cloud Security, and general network/DevSec Ops practices.

• AI & LLM Threat Modeling: identify design flaws, trust boundaries, and attack vectors unique to AI (such as agent autonomy and third-party plugin integrations.

• AI/ML Architecture: Understanding how LLM’s. vector databases, and agentic frameworks function.

DE&I and EEOC:

Inclusion & Diversity: As a purpose-led, performance driven company, we strive to foster a culture of belonging based on respect, connection, openness and authenticity. We are committed to building and maintaining a workplace that celebrates the diversity of our associates, supporting them to bring their authentic selves to work every day.

If your experience is close to what we’re looking for, please consider applying. Experience comes in many forms, skills are transferable, and passion goes a long way. We know that diverse backgrounds and experiences make for the best problem-solving and creative thinking, which is why we’re dedicated to adding new perspectives to the team and encourage everyone to apply. We look forward to learning more about you.

ARE YOU READY TO MAKE THE TURN? APPLY TODAY!