{"id":2909100,"url":"https://alion.io/job/second-foundation-principal-security-engineer","title":"Principal Security Engineer","company":{"id":2655516,"name":"Second Foundation","domain":"secondfoundation.dk","url":"https://alion.io/company/second-foundation-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":72,"open_postings":17,"ghost_share":0.471,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":44000,"max_usd":114000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"EU AI Act","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Terraform","optional":false},{"name":"Unix","optional":false}],"status":"live","first_seen_at":"2026-10-20T08:10:03Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T10:52:58Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"Second Foundation is a global energy trading company with around 500+ employees across locations in Prague HQ (CZ), Zug (CH), Berlin (DE), Charlotte (USA), and Tokyo (JP). We specialize in power market trading and in the integration and optimization of renewable energy and battery storage systems. In parallel, we are actively expanding our own asset base, with a primary focus on battery storage.\nWe are looking for a senior, hands-on Principal Security Engineer to serve as the technical design authority for security across our full technology stack. This is a builder’s role rather than a governance role: you design secure architecture at the design phase, map needs to risk end-to-end, and stay close enough to the technology to implement and prove what you propose. You work alongside the best mathematicians and engineers in the world.\nYou may recognize yourself under titles such as Staff/Senior Security Engineer, DevSecOps Engineer, Cloud Security Engineer, Platform Security Engineer, or Security Architect - what matters to us is that you have built and shipped security in a modern engineering environment, not only reviewed and documented it.\nWhat you would work on\nOwn security architecture across cloud, on-premise, and hybrid environments, and embed security into new initiatives already at the design phase (new offices, new-country operations, new business lines such as battery storage).\nPerform end-to-end, risk-driven mapping of security needs across systems and data flows, and translate it into concrete, implementable architecture.\nMature our DevSecOps posture and secure the full tech stack - application security, IAM, secrets management, and vulnerability management - partnering directly with engineering.\nProvide hands-on technical depth across development, data, IaaS (Kubernetes, Terraform), DevOps tooling, and the analytics stack, including Azure resource and permission design.\nDesign solutions for concrete cross-entity and partner problems, such as secure data exchange with our Japanese partner and the data separation between Second Foundation and Bochemie.\nWork with the Cybersecurity Admin and our SOC partner to close monitoring connector gaps and turn detections into architectural improvements.\nCo-own architecture decisions within the Security Committee, and consume regulatory requirements from the Compliance Cybersecurity Counsel as design inputs.\nWhere you go deep, and where you go broad\nThis is a broad role, but it is not a \"one person knows everything at expert level\" role. We expect architect-level judgement across all layers - cloud, IAM, network, application, and data - and proven, hands-on delivery depth in the areas that matter most to us:\n Azure resource, identity and permission design (IAM / secrets).\nDevSecOps and cloud-native security - Kubernetes, Terraform / infrastructure-as-code, CI/CD, policy- and compliance-as-code.\nSecure cross-entity and partner data exchange and separation.\nAcross the remaining areas we value strong architectural reasoning plus a demonstrated ability to get hands-on and learn new technologies quickly - more than pre-existing expert-level command of every domain.\nWhat makes you a great candidate\nProven, hands-on experience implementing - not only specifying - security across a modern engineering stack; you have built and shipped, not only reviewed and documented.\nStrong architecture skills: able to design at the design phase and reason about trade-offs across cloud, IAM, network, application, and data layers.\nReal hands-on depth in at least two of our core areas above (Azure/IAM, DevSecOps/Kubernetes/Terraform, secure data exchange), and the ability to ramp quickly on the rest.\nBreadth across development, data, IaaS / Kubernetes / Terraform, DevOps, and analytics, and a demonstrated ability to learn new technologies quickly.\nAbility to understand security strategically and to map risk to controls end-to-end.\nCredible with senior engineers; pragmatic; biased toward enabling the business securely rather than blocking it.\nEnglish language - C1 level; comfortable in an international, multi-entity environment.\nRelevant certifications (e.g. AWS/Azure security, CKS, CISSP, OSCP) are valued but not required - we weight demonstrated hands-on delivery over certificates.\nWhat this role is not\nTo keep the role focused and genuinely deliverable by one person, the following are owned elsewhere and are not required of this role:\nObscure or jurisdiction-specific regulatory detail (e.g. CRA, CER, NIS2 in Romania) - provided by the Compliance Cybersecurity Counsel.\nAbstract compliance frameworks as an ownership area (MITRE ATT&CK, GDPR, AI Act) - owned by Compliance / Legal.\nNon-IT physical security (camera masking in the office, fence height for battery-storage sites) - owned by asset owners with Compliance.\nDeep single-domain specialist work (e.g. the controller inside a battery-storage control unit, full Unix hardening of a Raspberry Pi) - this is not a one-person-knows-everything role.\nSOC operations and monitoring delivery - covered by our SOC partner and the Cybersecurity Admin.\nWhat we offer\nSenior-level, competitive salary package benchmarked to attract hands-on builders, with a performance-based bonus.\nAutonomy in how you manage your work.\nDiverse, international projects, with opportunities for on-site involvement.\nFlat hierarchies and short decision-making paths - a builder, not a blocker.\nBrand new office in the Prague city center - Masaryčka.\nExceptional benefits, including a training budget, on-site lunches, gym and more.\n25 days of paid holiday.","description_format":"text","description_chars":5590,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Development","Information Security","Angel Networks & Startup Accelerators"],"lifecycle":[{"event":"open","at":"2026-10-20T08:58:06Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":56,"reasons":["conf:0","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/second-foundation-principal-security-engineer","json_url":"https://alion.io/job/second-foundation-principal-security-engineer.json","meta":{"generated_at":"2026-10-21T11:18:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15963,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2655516},"rest":"https://alion.io/mcp/rest/get_company?id=2655516"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsecond-foundation-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsecond-foundation-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsecond-foundation-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/second-foundation-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsecond-foundation-principal-security-engineer"}]}