{"id":2429919,"url":"https://alion.io/job/ethos-principal-security-engineer","title":"Principal Security Engineer","company":{"id":6048,"name":"Ethos","domain":"ethos.com","url":"https://alion.io/company/ethos","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":62000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS Bedrock","optional":true},{"name":"EU AI Act","optional":true},{"name":"Kubernetes","optional":true},{"name":"Service Mesh","optional":true}],"status":"live","first_seen_at":"2026-06-22T07:45:59Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-10-13T10:16:15Z","board_verified":true,"closed_at":null,"days_open":113,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":113},"description":"About Ethos\nEthos (Nasdaq: $LIFE) is a leading life insurance technology company on a mission to protect families by democratizing access to life insurance and empowering agents at scale. With its robust three-sided technology platform, Ethos is transforming the life insurance experience for consumers, agents, and carriers alike. Ethos offers instant, accessible products and a seamless online process that requires no medical exams and just a few health questions; it eliminates traditional barriers, making it easier than ever for everyone to protect their families. Ethos is redefining how life insurance is bought, sold, and underwritten.\nAbout the Role\nWe’re seeking a Principal Security Engineer with deep expertise in application security, AI security, and security architecture to join our growing security team. This role reports directly to the CISO. You’ll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks - including AI-powered tooling - guiding both strategic security initiatives and day-to-day security engineering operations.\nThis is a high-impact role that will shape the security posture of our platforms and development practices, working across engineering, DevOps, architecture, and compliance teams.\nResponsibilities\nCore Security Engineering\nDesign and implement secure architectures for applications, APIs, microservices, and containerized workloads.\nDevelop and enforce application security best practices across SDLC; partner with DevOps and engineering teams to integrate security into CI/CD pipelines.\nConduct threat modeling, security design reviews, and risk assessments for new and existing systems.\nEvaluate and implement security tools, controls, and frameworks\nProvide technical leadership and mentorship to security engineers, software developers, and DevOps personnel.\nLead response to complex security incidents or architectural flaws; conduct root cause analysis and recommend strategic remediations.\nContribute to and influence security policies, standards, and governance.\nStay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations.\nAI Security\nOwn the AI security program, including risk frameworks, threat models, and governance policies for AI/ML systems and LLM integrations.\nReview new AI tool features and model updates for security risks prior to adoption, covering prompt injection, data leakage, model poisoning, and supply chain threats.\nTrack and apply industry guidance from NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, and CISA; translate standards into actionable internal controls and secure configuration baselines.\nEmbed AI security reviews into the feature development lifecycle, including pre-deployment red-teaming and adversarial testing of AI-powered features.\nMonitor AI regulatory developments and advise on security and compliance implications for the organisation.\nRequirements\nRequired Qualifications\n10+ years of experience in security engineering or architecture roles.\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution.\nDeep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation).\nStrong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling).\nExperience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls.\nProficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices.\nDemonstrated leadership in cross-functional security initiatives and technical mentorship.\nHands-on experience assessing security risks of AI/ML systems, including familiarity with OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF.\nDemonstrated ability to evaluate new AI tool features and vendor releases for security implications, and to produce clear risk assessments and secure configuration guidance.\nExperience researching and applying industry security guidance, translating standards and frameworks into organisational controls and policies.\nPreferred Qualifications\nCertifications such as CISSP, CCSP, AWS Security Specialty, GIAC (GCSA, GWEB, GDSA).\nFamiliarity with Kubernetes security, service mesh, and cloud-native security tooling.\nExperience in regulated industries (e.g., fintech, healthcare, SaaS at scale).\nExperience with AI red-teaming, adversarial ML, or LLM security assessment tooling.\nFamiliarity with secure configuration benchmarks for AI/ML platforms (e.g., AWS Bedrock).\nKnowledge of emerging AI regulatory frameworks (e.g., EU AI Act, NIST AI RMF) and their security and compliance implications.\n#LI-Hybrid\n#LI-SP1\nDon’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. At Ethos we are dedicated to building a diverse, inclusive and authentic workplace.\nWe are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Pursuant to the SF Fair Chance Ordinance, we will consider employment for qualified applicants with arrests and conviction records.\nTo learn more about what information we collect and how it may be used, please refer to our California Candidate Privacy Notice.\nRecruitment Notice: Please be aware of recruitment scams. All legitimate communication from our team will only come from email addresses ending in @ethos.com or @getethos.com.\n We will never ask for payment, banking details, or sensitive personal information during the hiring process. If you are contacted by someone claiming to represent us from a different email address, please treat it as fraudulent.","description_format":"text","description_chars":5978,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Life Insurance & Annuities","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-13T08:40:14Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.524,"p_room":0.36,"age_days":113,"expected_fill_days":58,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-13T10:43:28Z"},"pay":null,"html_url":"https://alion.io/job/ethos-principal-security-engineer","json_url":"https://alion.io/job/ethos-principal-security-engineer.json","meta":{"generated_at":"2026-10-13T10:43:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16481,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6048},"rest":"https://alion.io/mcp/rest/get_company?id=6048"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fethos-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fethos-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fethos-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ethos-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fethos-principal-security-engineer"}]}