{"id":499288,"url":"https://alion.io/job/deem-principal-security-engineer","title":"Principal Security Engineer","company":{"id":173503,"name":"Deem","domain":"deem.com","url":"https://alion.io/company/deem","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":95,"open_postings":11,"ghost_share":0,"stale_share":0.182,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colnbrook, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":91000,"max_usd":161000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST 800-53","optional":true},{"name":"NIST CSF","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"closed","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-31T05:33:40Z","board_verified":false,"closed_at":"2026-10-31T05:33:40Z","days_open":67,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":67},"description":"PRINCIPAL SECURITY ENGINEER | UK | LANGLEY HYBRID\nTravel obsessed? Big tech fan? Hey, you’re in good company. If you want to be part of the industry that makes the world go round, then look no further.\nTravelport is the brains behind lots of your travel bookings- plane, car or hotel. Our technology is used to book that magical holiday, infamous bachelorette party or long overdue school reunion. While we can’t solve mosquito bites or lost luggage, we can simplify a lot of the technical parts of travel, and we’re looking for the best thinkers to help us do it.\nWe’re hiring right now for a Senior Cloud Engineer! Search for #Travelport on LinkedIn and hear from our amazing team.\nHow you’ll make an impact:\nThe Principal Security Engineer is a senior individual contributor responsible for providing deep technical security expertise across the organization’s applications, infrastructure, networks, cloud environments, and security platforms.\nWorking closely with the Engineering and Architecture teams, this role helps translate security strategy, architectural principles, and regulatory requirements into practical, scalable technical solutions. The Principal Security Engineer will serve as a trusted technical advisor to engineering, infrastructure, cloud, network, architecture, and product teams, helping ensure security is incorporated throughout the design and implementation lifecycle.\nThe ideal candidate combines broad cybersecurity expertise with deep technical knowledge in networking, identity and access management, application security, cloud security, and security technologies. This individual should be equally comfortable reviewing an application architecture, troubleshooting a complex network or authentication issue, developing a security design, and collaborating with architects and engineers to implement effective security controls.\nYour role in action:\nServe as a senior technical security expert across application, network, cloud, and infrastructure security.\nPartner closely with the engineering and architecture teams to develop, evaluate, and implement secure technology environments.\nTranslate security approach principles, standards, and reference patterns into practical technical implementations.\nParticipate in architecture and design reviews for new applications, platforms, infrastructure, and significant technology changes.\nIdentify security risks within proposed architectures and work collaboratively with engineering and architecture teams to develop pragmatic solutions.\nApply security best practices to common application architectures, including web applications, APIs, microservices, distributed systems, and cloud-native applications.\nPerform technical threat modeling and security design assessments for critical applications and infrastructure.\nAct as an escalation point for complex security engineering and architecture issues.\nProvide deep technical expertise in Identity and Access Management (IAM) technologies and platforms.\nReview cloud environments and application architectures for adherence to security standards and best practices\nPCI DSS, Compliance & Risk\nProvide technical security expertise in support of PCI-DSS and other security compliance programs.\nInterpret PCI-DSS requirements and translate them into practical technical controls and implementation guidance.\nDesign and validate network segmentation and scope-reduction strategies for PCI environments.\nWork with Engineering, Architecture, Governance, Risk and Compliance teams to ensure security controls satisfy technical and regulatory requirements.\nSupport security assessments, technical evidence gathering, remediation activities, segmentation validation, and discussions with internal and external assessors.\nHelp evaluate compensating controls and alternative technical approaches when standard implementation patterns are not practical.\nTechnical Leadership\nServe as a recognized technical authority and trusted advisor on cybersecurity engineering matters.\nMentor security engineers and other technical professionals and help develop security expertise across engineering teams.\nLead complex cross-functional security initiatives involving engineering, architecture, applications, infrastructure, networking, cloud, and security teams.\nCommunicate complex security issues clearly to engineers, architects, technology leaders, risk teams, and other stakeholders\nCould this be you?\n10+ years of progressive experience in cybersecurity, security engineering, network security, infrastructure security, application security, or related technical disciplines.\nDemonstrated experience operating as a senior or principal-level individual contributor responsible for solving complex, cross-domain security problems.\nDeep knowledge of networking and network security, including segmentation, routing, firewalls, proxies, DNS, load balancing, TLS, and secure network architecture.\nDemonstrated experience designing network segmentation strategies for security and regulatory scope reduction, particularly within PCI DSS environments.\nStrong experience with Identity and Access Management, including OAuth 2.0, OIDC, SAML, federation, SSO, authentication, and authorization.\nHands-on experience with Okta and/or Auth0, including application integrations, authentication flows, federation, authorization, and troubleshooting complex identity implementations.\nExperience designing secure identity solutions for workforce IAM, customer identity (CIAM), APIs, and service-to-service authentication.\nHands-on experience with enterprise security technologies, particularly Akamai Web Application Firewall (WAF) or comparable application and edge security platforms.\nStrong knowledge of PCI-DSS, including experience supporting compliance assessments, remediation, technical controls, and scope-reduction strategies.\nStrong knowledge of AWS security, including IAM, VPC and network security, encryption, logging, monitoring, and workload security.\nExperience applying security best practices to web applications, APIs, microservices, distributed systems, and cloud-native architectures.\nStrong understanding of CI/CD principles, DevSecOps, secure SDLC practices, Infrastructure as Code, and automated security testing.\nKnowledge of common application and API security vulnerabilities and mitigation techniques.\nExperience conducting security design reviews, technical risk assessments, and threat modeling.\nExperience collaborating with engineering and architecture teams to develop and implement secure solutions.\nAbility to troubleshoot complex technical security issues spanning applications, identity, networking, cloud infrastructure, and security platforms.\nStrong written and verbal communication skills with the ability to explain complex security topics to both highly technical and non-technical audiences.\n\nPreferred Qualifications\nExperience working in large-scale, highly distributed, global, or regulated technology environments.\nAdvanced experience with Okta and Auth0 administration, configuration, integration, and security architecture.\nExperience securing payment platforms, e-commerce environments, APIs, or other high-volume transactional systems.\nExperience with Zero Trust architecture and identity-centric security models.\nExperience with container and Kubernetes security.\nExperience with Infrastructure as Code technologies and automated cloud security.\nFamiliarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, or CIS Controls.\nExperience with threat modeling and architecture risk assessment methodologies.\nRelevant certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or equivalent credentials.\nYour journey at Travelport starts here- apply now!\nWe are an equal opportunities employer and will consider all qualified applicants purely on their skills and abilities. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation, if needed.","description_format":"text","description_chars":8160,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Travel & Tourism","Business Travel","Travel Technology","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-07T09:04:10Z"},{"event":"close","at":"2026-10-31T05:33:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/deem-principal-security-engineer","json_url":"https://alion.io/job/deem-principal-security-engineer.json","meta":{"generated_at":"2026-10-31T07:44:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":173503},"rest":"https://alion.io/mcp/rest/get_company?id=173503"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdeem-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdeem-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdeem-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/deem-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdeem-principal-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":499288}},{"tool":"search_jobs","arguments":{"company":"deem.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":499288},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}