Principal Security Engineer, Product & Infrastructure

Overview

Join Pigment’s security team to strengthen protection for a fast-growing AI-powered platform. You will shape the security roadmap across product and infrastructure, working closely with product and engineering to implement defense-in-depth controls. The role blends governance, risk assessment, and hands-on security delivery within a SOC 2 and ISO 27001 framework. You’ll influence secure design, run security reviews, and drive automation to safeguard production environments. This is a hands-on role at scale, offering high impact in a collaborative, innovation-driven company.

Pay / Benefits

• Stock options
• Health insurance
• Lunch vouchers
• Learning stipend
• Remote work stipend
• Offsite and international offices

Responsibilities

• Define and maintain a risk-driven security roadmap for product and infrastructure, prioritizing features and gaining cross-functional buy-in.
• Act as security advisor to developers, PMs, and stakeholders; perform risk assessments and security reviews of code, architectures, and configurations.
• Coordinate security assurance activities including third-party audits, code/architecture reviews, red team exercises, and bug bounty management.
• Lead end-to-end vulnerability management: detection, scoring, triage, remediation design, and KPI measurement.
• Enhance monitoring and incident detection with automation, alerting, and runbooks; support incident response and fraud investigations.
• Develop and deliver security awareness training and act as a security evangelist for product teams, developers, and SREs.
• Drive secure design of AI-powered features (e.g., MCP Server, Modeler Agent) with threat modeling and design reviews.
• Improve least privilege implementation and security process automation (CI/CD, SIEM)

Key requirements

• 5+ years of security experience (engineer or consultant)
• Hands-on, no people management required
• Strong technical breadth across development, databases, networking, and web technologies
• Team player with problem-solving, proactive attitude, humility, and growth mindset
• Fluent in English

• team spirit
• problem-solving
• humility
• GCP
• Kubernetes
• Terraform

…