Principal Software Engineer, Product Security

The role

The Principal Software Engineer, Product Security will lead and elevate security across infrastructure, applications, and internal systems. You will design secure systems, improve detection and response, and strengthen cloud security posture by partnering with various teams.

What you will do

• Design and build internal security tooling from scratch
• Identify vulnerabilities across AWS-based stack
• Develop AI-assisted and agent-based tooling
• Build and maintain security automation
• Conduct hands-on penetration testing and vulnerability research
• Partner with engineering teams to remediate findings
• Participate in the security on-call rotation
• Contribute to threat modeling and security design reviews
• Stay current on offensive security techniques and emerging attack patterns

Required qualifications

• 8+ years of experience in security engineering, software engineering with a security focus, or closely related roles
• Proficient in at least one systems language (Go, Rust, C++) and at least one higher-level language (Python, TypeScript)
• Proven ability to design and ship production software end-to-end
• Deep AWS infrastructure expertise, including IAM, EKS, RDS, networking, and managed services
• Proficiency with using an AI tool such as Claude Code, ChatGPT/Codex, Cursor or another similar tool
• Demonstrated ability to identify security misconfigurations and vulnerabilities across cloud architectures, application code, and the integrations between them
• Experience conducting or building tooling for penetration testing, vulnerability assessment, or red team activities
• Track record of building security automation and tooling from scratch
• Comfortable operating independently on ambiguous problems without heavy process or oversight
• Strong communication skills and the ability to partner with engineers who are not security specialists

Nice to have

• Experience building or deploying LLM-based agents or AI-assisted security tooling
• Prior experience at a security product company (Wiz, Snyk, Datadog, etc.) or other security-forward engineering org
• Prior fintech, identity, or fraud detection experience
• Industry certifications (OSCP, OSCE, GPEN, GXPN)
• Experience with detection engineering or SIEM platforms
• Published security research, CVEs, or open source security tooling contributions
• Experience supporting compliance frameworks (FedRAMP, SOC 2, PCI DSS) without it being their primary focus

Benefits

• Employer paid group health insurance for you and your dependents
• 401(k) plan with employer match (or equivalent for non US-based roles)
• Flexible paid time off
• Regular company-wide in-person events
• Home office stipend

About the company

SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. They serve 13 of the top 15 U.S. banks and are a digital-first company with offices in the U.S. and India.