{"id":4014385,"url":"https://alion.io/job/cars-commerce-principal-security-engineer","title":"Principal Security Engineer","company":{"id":2097484,"name":"Cars Commerce","domain":"carscommerce.inc","url":"https://alion.io/company/carscommerce","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":175800,"max":219750,"currency":"USD","period":"year","gross":null,"usd_annual":219750},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Cloudflare","optional":true},{"name":"Crowdstrike","optional":true},{"name":"CyberArk","optional":true},{"name":"Snyk","optional":true}],"status":"live","first_seen_at":"2026-11-10T09:31:11Z","employer_posted_date":null,"last_verified_at":"2026-11-10T09:31:11Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"This a Full Remote job, the offer is available from: United States\nPower confident decisions at Cars.com\nCars.com is the marketplace millions of people trust to buy and sell cars with confidence.\nMore than 25 years ago, we started as a simple idea, connect buyers and sellers, and today we do a lot more: trusted reviews, transparent pricing, and real-time, proprietary data that cut through the noise of one of life's biggest purchases. Our scaled marketplace, paired with interconnected technology, data, and media, gives dealers and OEMs everything they need to sell more cars.\nAt Cars.com, we debate openly, decide fast, and deliver what we say we will. We solve real problems for car shoppers and dealers, simplify for speed, and focus on what matters most. We win together or not at all. Here, your work counts, your ideas can help shape what’s next, and you’ll build alongside people who have your back.\nWe’re in the middle of a real transformation, modernizing the company and investing in AI and data to move faster. You're joining the No. 1 brand people think of first when shopping for a car, at the exact moment it's being rebuilt for what's next. You help decide what that becomes. That kind of influence is rare, and it's exactly why this is a place worth building your career.\nDon't just take our word for it, we're proud to be named one of Built In's 2026 Best Places to Work in Chicago and across the U.S.\nReady to help build the most trusted place to buy and sell a car? Join us.\nDo you thrive in fast-moving environments safeguarding critical systems? Are you passionate about staying ahead of the ever-evolving cyber threat landscape? If so, we want you on our team! We are seeking a seasoned Principal Security Engineer to join our growing security team. As a senior-level cybersecurity professional, you will play a pivotal role in designing, implementing, and managing our organization's security posture. You will be a trusted advisor to leadership, providing strategic direction and ensuring our security solutions align with industry best practices and compliance requirements.\nResponsibilities\nReporting directly to the CISO, this position offers executive-level exposure and cross-departmental experience. The individual will have the opportunity to make impactful contributions as they manage mission-critical initiatives and projects. The position will involve direct interaction with the executive team and corporate partners.\nArchitect Secure Solutions: Design, implement, and maintain a comprehensive security architecture that safeguards our critical infrastructure, data, and applications.Design, implement, and maintain robust security controls and countermeasures across our IT and Product Cloud infrastructure.\nCollaborate with Product, Engineering, and other departments to integrate security best practices into business processes.\n\nLead Threat Defense: Champion proactive security measures.\nMentor a team of SecOps engineers, providing guidance and support in implementing security best practices.\nDevelop and implement security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.\nCollaborate with development, operations, and security teams to integrate security into the software development lifecycle (SDLC) and CI/CD pipeline.\nConduct security assessments, code reviews, and penetration testing to identify and mitigate vulnerabilities.\nDesign and implement security controls for infrastructure as code (IaC), cloud environments, and containerized applications.\nAutomate security testing and compliance checks using scripting and configuration management tools.\nMonitor and analyze security events and incidents, leading incident response efforts to minimize impact and prevent recurrence.\nStay informed about emerging security threats, vulnerabilities, and industry trends, providing guidance on mitigation strategies.\nPartner with senior leadership to prioritize security initiatives and allocate resources effectively.\nDesign and Implement automated monitoring and logging across the development and deployment pipeline to detect security incidents in real-time.\nUtilize security tools to monitor for suspicious activities and indicators of compromise.\nIntegrate security alerts and notifications into the CI/CD pipeline to facilitate rapid detection and response.\nUpon detection of a security incident, initiate a thorough investigation to assess the scope and impact of the incident.\nAnalyze logs, network traffic, and system configurations to identify the root cause of the incident and determine the extent of any compromise.\nCollaborate with development, operations, and security teams to gather relevant information and context for incident analysis.\nCompliance Champion: Ensure adherence to industry regulations and security compliance frameworks (e.g., PCI DSS, HIPAA, SOC 2).\nSecurity Advocacy & Awareness: Champion a culture of security awareness within the organization, developing and implementing security training programs for employees.\nQualifications:\nMinimum 10 years of experience in information security with a proven track record of success in a similar role.\nIn-depth knowledge of security principles, technologies, and methodologies (e.g., firewalls, intrusion detection/prevention systems, encryption, IAM).\nIn-depth understanding of DevOps principles, methodologies, and tools.\nHands-on experience with cloud platforms (e.g., AWS, Azure, GCP), containerization technologies (e.g., Docker, Kubernetes), and infrastructure as code (IaC) tools.\nProficiency in scripting languages such as Python, PowerShell, or Bash.\nFamiliarity with compliance standards such as PCI DSS, SOC II, and ISO27001.\nExcellent communication, collaboration, and problem-solving skills.\nKnowledge of secure software development frameworks (e.g., OWASP).\nExperience implementing security in Agile and DevOps environments.\nPreferred Qualifications:\nBachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).\nSecurity certifications such as CISSP, CISM, or AWS Certified Security Specialty.\nDeep Experience in the following technologies:Cloudflare\nCrowdstrike\nProofpoint\nCyberArk EPM\nBurpSuite\nAmazon Security Hub, Guard Duty, Inspector\nJumpCloud\nSnyk\n\nExperience in developing security budgets\nCompensation\nWe share compensation up front so you have the information you need to make a confident decision. This range reflects target base compensation. Where you land depends on skills and experience. If this range works for you, we encourage you to apply.Salary Range: $175,800.00-219,750.00Benefits\nConfidence, built in. The same confidence we build for car buyers and sellers, we build into how we treat our own:\nMedical, dental & vision from day one - no waiting period\n401(k) with company match, immediate vesting\nEmployee Stock Purchase Plan - buy Cars.com stock at a discount\nUnlimited Flex Time Off, 11 paid holidays, 1 volunteer day\nPaid parental and caregiver leave\n$350 one-time home office stipend + $70/month for virtual-first work\nTuition reimbursement up to $5,250/year\n...and more - see our full Benefits, Perks & Culture here\n\nLegal\nFor US-based positions: Applicants must be authorized to work in the United States. We're unable to sponsor employment visas at this time.\nCars.com is an equal opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.\nApplicants:\n\nclick here\n\nto review our Privacy Policy for Applicants.\nCurrent employees:\n\nclick here\n\nto review our California Privacy Policy for Employees.","description_format":"text","description_chars":7741,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Marketplaces","Wholesale"],"lifecycle":[{"event":"open","at":"2026-11-10T11:57:23Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-10T14:23:27Z"},"pay":{"stated_usd_annual":219750,"is_top_pay":true},"html_url":"https://alion.io/job/cars-commerce-principal-security-engineer","json_url":"https://alion.io/job/cars-commerce-principal-security-engineer.json","meta":{"generated_at":"2026-11-10T14:23:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33414,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2097484},"rest":"https://alion.io/mcp/rest/get_company?id=2097484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcars-commerce-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcars-commerce-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcars-commerce-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cars-commerce-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcars-commerce-principal-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4014385}},{"tool":"search_jobs","arguments":{"company":"carscommerce.inc","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4014385},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}