Principal Security Engineer

What You'll Do

As the most senior individual contributor on our security team, you will take on the hardest technical problems across cloud, platform, identity, and detection, the ones that span teams and have no obvious owner. You will raise the engineering bar for the whole function, shaping how controls are designed, built, automated, and proven to auditors.

You will also hold enough working context to step in for security leadership when needed, so that monitoring, controls, and in-flight programs keep moving without interruption. This is a deliberately senior hire: broad command of the security stack, real depth in at least two areas, and the judgment to make calls without escalation.

Security is central to the promise we make to the legal and professional-services firms that trust us with their most sensitive information, and this role plays a direct part in keeping that promise.

You will

• Lead the most complex technical security work across cloud, platform, identity, and detection, including problems that cross team boundaries
• Set and raise the engineering standard for the security team: design patterns, code and configuration review, automation, and the quality bar for how controls are built and evidenced
• Partner with security operations and architecture on advanced detection engineering, threat hunting, secure-by-design reviews, and technical leadership during major incidents
• Own the build-out and integration of security tooling across the environment
• Own the technical evidence behind our control attestations, so controls are not only operating but demonstrable to auditors and leadership
• Automate security operations and control verification, making coverage continuously measurable rather than point-in-time
• Mentor engineers and analysts across the team
• Serve as the senior technical stand-in for security leadership, maintaining working knowledge of the control environment and in-flight programs, and representing security in cross-functional and executive forums

What You'll Need to be Successful

• 10+ years in security engineering, with demonstrated depth in at least two of: cloud security, detection engineering, identity, platform/infrastructure security, or application security
• Track record as a senior individual contributor who has owned ambiguous, cross-team technical problems end to end
• Strong hands-on cloud security experience, with AWS strongly preferred, including identity, network, and workload controls
• Substantial automation and scripting ability (Python, Go, or similar) and comfort working in infrastructure-as-code and CI/CD environments
• Working knowledge of security operations and incident response, sufficient to provide technical leadership during a major incident
• The judgment and communication skills to represent security credibly with executives and auditors without day-to-day supervision

What Will Make You Stand Out

• Prior experience as a deputy, second-in-command, or acting security leader
• Experience with modern cloud security posture, endpoint detection, identity, and SaaS security tooling
• Relevant certifications, such as CISSP, GSE, GCIA, GCSA, or cloud-security specialties
• Experience in a SaaS or regulated environment (legal or financial services), and familiarity with compliance frameworks such as SOC 2 or ISO 27001
• Experience building security automation and control-verification tooling at scale

What You'll Love About NetDocuments

• 90% healthcare premiums company covered
• HSA company contribution
• 401K match at 4% with immediate vesting
• Flexible PTO (typically 3 to 4 weeks a year)
• 10 paid holidays
• Monthly contributions for life activities & wellness
• Access to LinkedIn learning with monthly dedicated time to explore

What You Will Receive

• 90% healthcare premiums company covered
• HSA company contribution
• 401K match at 4% with no vesting period
• Potential for annual merit increases
• Flexible time off typically 3 to 4 weeks a year, not including the 9 paid holidays
• Authenticity and accountability from leadership
• Connection, access, and mentorship from exceptional leaders
• Growing company with opportunities for advancement

Compensation Transparency

The compensation range for this position is: $200,000 - $220,000

The posted cash compensation for this position includes on target earnings, base salary and variable if applicable. Some roles may qualify for overtime pay. Individual compensation packages are determined based on various factors specific to each candidate, such as career level, skills, experience, geographic location, qualifications, and other job-related considerations