{"id":3017938,"url":"https://alion.io/job/drivewealth-principal-security-engineer","title":"Principal Security Engineer","company":{"id":58535,"name":"DriveWealth","domain":"drivewealth.com","url":"https://alion.io/company/drivewealth","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":129,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Austin, United States","Dallas, United States","Denver, United States","Miami, United States","San Francisco, United States","Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":215000,"max":235000,"currency":"USD","period":"year","gross":null,"usd_annual":235000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DynamoDB","optional":false},{"name":"GDPR","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-21T16:17:13Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-22T23:38:31Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Us\nDriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of US equities, mutual funds, ETFs, fixed income, and options.\nThere’s never been a better time to build a category-defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional-grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!\nAbout the Role\nDriveWealth LLC is seeking a highly motivated and experienced Principal Security Engineer to design, build, and mature security capabilities across our brokerage platform and corporate environment. Reporting to the Head of Security Engineering, you will serve as a senior technical leader, own complex engineering initiatives, and shape the architecture and implementation of controls that support the firm’s growth, protect client and consumer data, and meet or exceed regulatory obligations.\nIn this hands-on role, you will secure our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology. We are seeking an engineer who combines architectural judgment with strong implementation skills to deliver scalable security solutions through software and automation. You will also build and maintain the platforms and services used by Security Operations, provide security consulting to business leaders and other engineers, and partner with Engineering, IT, Risk, and Compliance within an innovative and entrepreneurial culture.\nWhat You’ll Do\nSecurity Architecture & Technical Leadership\nArchitecture Standards: Design and assist in the implementation of reusable security patterns and automated guardrails across product and corporate systems.\nEngineering Delivery: Own complex initiatives from design and testing through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements.\nTechnical Leadership: Mentor engineers, conduct design and code reviews, and document architectures and runbooks. Influence technical decisions across Engineering and IT while balancing security, reliability, and delivery.\nProduct & Corporate Security\nCloud & Network Security: Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure, accounting for availability and trading latency.\nEndpoint & Identity: Harden Windows and macOS, tune endpoint protection, and automate Okta and JumpCloud identity and device controls. Strengthen privileged access, phishing-resistant authentication, and secure configurations for Slack and other SaaS applications.\nApplication & Container Security: Embed threat modeling, API security, security testing, imagesigning, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows.\n\nExposure Management: Automate code, dependency, container, and infrastructure scanning. Partner with Engineering and IT to prioritize remediation, verify fixes, and prevent recurring vulnerabilities.\nSecurity Operations Engineering\nSecurity Platforms: Build, integrate, and maintain SIEM, SOAR, endpoint security, and vulnerability management services, including provisioning, monitoring, and documented maintenance and support procedures.\nDetection & Automation: Engineer telemetry collection, normalization, and enrichment. Partner with Security & Threat Operations to develop and validate analytics queries, detections, and automated response playbooks across cloud, application, identity, and endpoint systems.\nIncident Engineering: Provide subject matter expertise in support of threat hunting and incidents. Deliver containment automation and lead post-incident hardening.\nCompliance & Data Protection\nCompliance Automation: Translate requirements defined with Legal, Compliance, and GRC into tested technical controls, including SEC Rule 17a-3 and 17a-4 recordkeeping capabilities. Automate evidence collection and support audits and regulatory examinations.\nData Security & Privacy: Build and maintain data discovery, classification, access control, encryption, retention, and secure deletion capabilities to support GDPR and other applicable privacy and data protection requirements.\nYou Bring\n10+ years of relevant security, software, or infrastructure engineering experience, with a track record leading complex security initiatives from architecture through production operation.\nDeep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.\nStrong working knowledge of endpoint, identity, and SaaS security across Windows and macOS.\nExperience with Okta, JumpCloud, or comparable platforms is preferred.\nStrong software and automation skills in Python or a comparable language and practical experience with Terraform, CI/CD, GitOps, and security as code.\nExperience building and operating security platforms, telemetry pipelines, detections, and response automation, with attention to data quality, reliability, and maintainability.\nSound architectural judgment, strong troubleshooting skills, and the ability to prioritize risk, manage competing initiatives, influence cross-functional decisions, and mentor technical colleagues.\nExperience in regulated financial services or another environment with demanding availability and audit requirements. Familiarity with NIST CSF or SP 800-53 is required. Brokerage, SEC/FINRA, and privacy compliance experience are preferred.\nBachelor’s degree in a related field or equivalent practical experience. Relevant security, AWS, Kubernetes, or GIAC certifications are a plus.\nLocation\nThis role is open to candidates in the following locations: New York City, Chicago, Austin, Dallas, Denver, Miami, San Francisco Bay Area, or Seattle. \nIf based in New York or Chicago: This role is expected to come into the office on a cadence set by the Hiring Manager/Team.\nIf based in Austin, Dallas, Denver, Miami, San Francisco, or Seattle: This is a fully remote role, though you may need to visit our onsite offices from time to time.\nIf you're not based in one of the locations listed above, this role is not a fit, and we cannot accommodate remote work outside these locations.\nApplicants must be authorized to work for any employer in the U.S. DriveWealth does not sponsor or take over sponsorship of an employment visa at this time.\nPay Range: $215,000 - $235,000 USD\nWorking at DriveWealth\nWe do our best work when we're in the same room. To maintain the speed our partners expect, our New York, Chicago, and Lithuania teams work in office on a hybrid schedule. We've found that being physically side-by-side is the only way to solve complex problems in real-time and stay truly accountable to the products we ship. When you're here, you're working directly with the people making the decisions.\nTo support that work, we provide competitive compensation, equity, and a 401(k) match. We also offer Medical insurance, Dental insurance, Vision insurance, Disability insurance, and Paid Parental Leave, along with a wellness reimbursement, a company-provided phone, and a personal development allowance. Finally, we value the time you spend away from the office with generous Paid Time Off (PTO) and observed holidays.\nWork Authorization\nApplicants must possess the legal right to work in the country where the position is located at the time of application. DriveWealth requires all employees to provide original documentation verifying their work authorization on or before their first day of employment.\nFor US-based roles: Applicants must be currently authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship. DriveWealth does not provide visa sponsorship or support for employment authorization, including transfers, at this time. Offers of employment are strictly contingent upon an individual’s ability to secure and maintain the legal right to work at the Company.\nHow We Think About AI\nWe leverage AI to work smarter and move faster. We seek AI-curious talent who are proactive about using emerging tools to increase signal quality, reduce friction, and improve outcomes to deliver products faster, provide better service to our partners, and to streamline processes. Your ability to leverage our internal tools and technology to drive results is as important to us as your core domain expertise.\nCompensation\nPay is generally based on the level, complexity, responsibility, location, and job duties/requirements of the specific position. We then source candidates with the requisite skills, expertise, education, training, and experience. If you are selected for an interview, please feel welcome to speak to a recruiter about our compensation philosophy and other available benefits. This role is eligible for base, bonus, equity, 401(k) match, and heavily subsidized benefits and perks.\nEqual Employment Opportunity\nTo build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. \nAgency Disclaimer\nDriveWealth does not accept agency resumes. Do not forward resumes to our jobs alias, employees, or any other organization location. DriveWealth is not responsible for any fees related to unsolicited resumes.","description_format":"text","description_chars":10548,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Equity","Health insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-21T17:05:14Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":129,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":235000,"is_top_pay":true},"html_url":"https://alion.io/job/drivewealth-principal-security-engineer","json_url":"https://alion.io/job/drivewealth-principal-security-engineer.json","meta":{"generated_at":"2026-10-23T02:11:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58535},"rest":"https://alion.io/mcp/rest/get_company?id=58535"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdrivewealth-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdrivewealth-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdrivewealth-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/drivewealth-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdrivewealth-principal-security-engineer"}]}