Principal Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $175.8k - $219.8k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cars Commerce

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Cars Commerce is a comprehensive online platform that facilitates the buying, selling, and research of vehicles. It provides a wide range of listings for new and used cars, along with tools and resources for customers to compare different makes and models, read reviews, and obtain financing options. With a focus on enhancing the car shopping experience, Cars Commerce connects sellers with local dealers and offers estimates for vehicle sales, ensuring a streamlined process for prospective buyers and sellers alike.

📋 Description

• Report directly to the CISO with executive-level exposure and cross-departmental experience. • Design, implement, and maintain comprehensive security architecture for critical infrastructure, data, and applications. • Design, implement, and maintain security controls and countermeasures across IT and Product Cloud infrastructure. • Collaborate with Product, Engineering, development, operations, and security teams to integrate security best practices into business processes, the SDLC, and CI/CD pipelines. • Lead proactive threat defense and incident response efforts. • Mentor SecOps engineers and provide guidance on security best practices. • Develop and implement security policies, standards, procedures, and employee security training programs. • Conduct security assessments, code reviews, and penetration testing. • Design and implement security controls for IaC, cloud environments, and containerized applications. • Automate security testing and compliance checks using scripting and configuration management tools. • Design and implement automated monitoring and logging across development and deployment pipelines. • Monitor and analyze security events, suspicious activity, indicators of compromise, logs, network traffic, and system configurations. • Investigate incidents, assess scope and impact, identify root causes, and determine the extent of compromise. • Ensure adherence to PCI DSS, HIPAA, SOC 2, and other security compliance frameworks. • Partner with senior leadership to prioritize security initiatives and allocate resources.

🎯 Requirements

• Minimum 10 years of experience in information security with a proven track record of success in a similar role. • In-depth knowledge of security principles, technologies, and methodologies (e.g., firewalls, intrusion detection/prevention systems, encryption, IAM). • In-depth understanding of DevOps principles, methodologies, and tools. • Hands-on experience with cloud platforms (e.g., AWS, Azure, GCP), containerization technologies (e.g., Docker, Kubernetes), and infrastructure as code (IaC) tools. • Proficiency in scripting languages such as Python, PowerShell, or Bash. • Familiarity with compliance standards such as PCI DSS, SOC II, and ISO27001. • Excellent communication, collaboration, and problem-solving skills. • Knowledge of secure software development frameworks (e.g., OWASP). • Experience implementing security in Agile and DevOps environments. • Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience). • Security certifications such as CISSP, CISM, or AWS Certified Security Specialty. • Deep Experience in the following technologies: Cloudflare, Crowdstrike, Proofpoint, CyberArk EPM, BurpSuite, Amazon Security Hub, Guard Duty, Inspector, JumpCloud, Snyk. • Experience in developing security budgets. • Applicants must be authorized to work in the United States; employment visa sponsorship is unavailable.

🏖️ Benefits

• Medical, dental & vision from day one — no waiting period • 401(k) with company match, immediate vesting • Employee Stock Purchase Plan — buy Cars.com stock at a discount • Unlimited Flex Time Off, 11 paid holidays, 1 volunteer day • Paid parental and caregiver leave • $350 one-time home office stipend + $70/month for virtual-first work • Tuition reimbursement up to $5,250/year

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume