Own security architecture and DevSecOps for SaaS, cloud, and AI applications. Lead vulnerability management, application security, red-team and adversarial testing, multi-tenant isolation, identity and data protection, compliance controls, and AI security. Partner with engineering, platform, SRE, data, and governance teams; participate in incident response, mentor engineers, and communicate enterprise risk to executives. The role requires hands-on coding and leadership across regulated, multi-cloud environments.
We are hiring a Principal Security Engineer / DevSecOps Lead to own the security posture of our SaaS platforms, cloud environments, and AI-enabled applications. This is a senior hands-on leadership role: you will design and drive the security architecture that protects a regulated, multi-tenant investment platform, embed automated security controls into how we build and ship software, and lead red-team-informed offensive testing that measurably reduces real risk. You will partner with SRE, platform, data, and application teams — and directly with the CISO to set the enterprise standard for secure development.
What you'll do
- Own security architecture for our SaaS platforms, multi-cloud environments (AWS, Azure), and AI-enabled applications, including LLM- and agent-based workloads.
- Build and operate a modern DevSecOps program: SAST, DAST, IaC scanning, SBOM/supply-chain (Sigstore, SLSA), secrets detection, container and Kubernetes admission control, and policy-as-code (OPA/Cedar).
- Design and run an automated vulnerability management program that prioritizes by exploitability and business impact, drives closure SLAs, and holds engineering teams accountable through metrics.
- Lead application security across the SDLC: threat modeling, secure design reviews, code review at critical seams, security champions program, and paved-road guardrails engineers actually adopt.
- Direct red-team and adversarial testing — internal exercises, purple-teaming, and third-party engagements — and translate findings into durable architectural fixes, not just tickets.
- Harden multi-tenant isolation, identity, and data protection for a regulated buy-side platform; own the security controls that map to SOC 2, SOX, and applicable regulatory obligations.
- Set the security-by-design bar for AI-enabled applications: prompt-injection defense, tool/agent boundary controls, model and data provenance, retention, and abuse monitoring.
- Partner with IT/AI Platform, SRE, and Data Governance on identity, secrets, network segmentation, logging, and incident response; participate in on-call for security incidents.
- Mentor senior engineers across security and platform; represent security in executive and board-facing risk reporting when required.
Required experience
- 10+ years in information security with deep hands-on DevSecOps and application security expertise; senior-leader scope but still writes code and shipped controls.
- Proven design and operation of security for SaaS platforms and cloud environments (AWS and/or Azure) at enterprise scale, including multi-tenant workloads.
- Strong background in automated vulnerability management and security testing — SAST/DAST/SCA, IaC/CSPM, container/K8s security, and SBOM/supply-chain tooling.
- Demonstrated red-team / offensive security experience: leading engagements, conducting or overseeing adversarial testing, and running purple-team exercises against real production systems.
- Deep secure-development expertise: threat modeling (STRIDE/attack trees), secure code review, cryptography fundamentals, identity/OAuth/OIDC, and API security.
- Experience securing AI-enabled applications — LLM/agent security, prompt injection, data-leakage controls, and model/tool boundary design.
- Strong hands-on skills in Python and/or Go; comfortable operating in Terraform, Kubernetes, and modern CI/CD.
- Track record leading security architecture initiatives for large-scale enterprise and multi-tenant environments, with measurable risk reduction.
Nice to have
- Prior financial services, buy-side, or otherwise regulated (SOC 2, SOX, GLBA, NYDFS 500) environment experience.
- Offensive security certifications (OSCP, OSEP, OSCE, CRTO) or published research/CVEs.
- Experience with red-team infrastructure (C2 frameworks, EDR evasion, cloud-native attack paths) and detection-engineering collaboration.
- Familiarity with MCP, agent frameworks, and enterprise LLM gateways.
The compensation range for this position is for a full-time employee in New York. The base salary offered will depend on qualifications, market data and internal equity.
Base Salary Range
$235,000—$290,000 USD
At DigitalBridge, we strive to create an inclusive environment where diverse employees want to work and where they can flourish professionally. In furtherance of our culture, all qualified applicants will receive consideration for employment without regard to race, national origin, gender, age, religion, disability, sexual orientation, veteran status, marital status or any other characteristics protected by law.
DigitalBridge New York, New York, USA Office
New York, United States
Similar Jobs
Aerospace • Hardware • Robotics • Software
Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.
Top Skills:
AWSAws CdkAws GovcloudAzure GovernmentCi/CdCmmcCrowdstrikeCuiDisa StigsDockerEdrFedrampGoInfrastructure As CodeItarKubernetesLinuxNist 800-171Nist 800-53PantherPythonRmfRustSentineloneSIEMSplunkTerraform
eCommerce • Fintech • Real Estate • Software • PropTech
Owns Opendoor’s enterprise identity security platform, including workforce authentication, passwordless access, authorization policies, non-human and AI agent identities, lifecycle automation, and identity infrastructure as code. Builds Okta integrations and first-party tooling, manages secure access standards, feeds identity telemetry into detection systems, supports incident response, and mentors security and IT engineers. The role requires strong software engineering, enterprise IAM expertise, and hands-on experience with Okta, passkeys, Terraform, and identity protocols.
Top Skills:
Admin SdkAnthropicDatadogDlpFido2GitGoGoogle WorkspaceOidcOktaOkta WorkflowsOpenaiPythonSAMLScimTerraformTypescriptWebauthn
Big Data • Cloud • Software • Database
Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.
Top Skills:
AIAWSCompute ArchitectureGCPAzureMongoDBNetwork ArchitectureSecurity EngineeringStorage Architecture
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
