Principal Security Engineer

Position Overview

 We are looking for a highly skilled Principal Security Engineer with a passion for building the future of autonomous security operations into Stellar Cyber’s Open XDR platform. You will join a mission-driven team where security engineering, software engineering, and machine learning research are blended to meet real-world SOC operations. This role is not just about building platform features. It is about living and breathing security operations, interacting and working with SOC analysts to build AI agents, tools, and workflows that elevate the state of the art in alert investigation, threat hunting, and response automation.

 
Note: this role requires both prior software engineering and security operations knowledge or experience.

Key Responsibilities

• Observe and study SOC practices first-hand such as alert investigation and threat hunting, internalize required context, and extract patterns for automation and tooling.
• Build, extend, and maintain security-focused AI agents, tools, and workflows that support alert investigation, threat hunting, and response automation across the SOC lifecycle.
• Translate complex security workflows and analyst behaviors into scalable automation primitives that power autonomous SOC capabilities.
• Rapidly prototype and iterate on new tooling, integrations, and platform features based on real operational feedback.
• Collaborate cross-functionally with product, research, and engineering to ensure tools meet both user needs and architectural standards. 
• Communicate insights and trade-offs to both technical and non-technical stakeholders, helping shape product and operational direction.

Requirements

Minimum Qualifications

• Experience in cybersecurity or SOC operations, with strong familiarity with security workflows, tools, and operational practices.
• Solid software engineering skills, including coding skills to build and automate security workflows within tools or platforms, knowledge on software engineering tooling such as Git, and the ability to work with engineering members.
• Proficiency in at least one modern programming language commonly used for tooling or automation (e.g., Python, TypeScript).
• Experience working with diverse security tools (e.g., SIEM, endpoint telemetry, intrusion detection, threat intelligence feeds) and integrating them into automated pipelines.
• Ability to observe, document, and abstract complex operational behavior into repeatable, scalable software constructs.
• Strong communication skills, with confidence explaining security concepts and engineering choices to varied audiences.

Preferred Qualifications

• Prior experience with SOC teams or working directly in security operations.
• Familiarity with security automation frameworks (SOAR, detection engineering toolkits, security primitives).
• Background in threat detection engineering, red/blue team tools, or incident response workflows.
• Demonstrated ability to build tools that reduce manual work and enable autonomous decision-making.
• Advanced security certifications (e.g., OSCP, CISSP, GCIH) or equivalent hands-on experience.

Why Join Us

• Work at the forefront of cybersecurity innovation within a dynamic, fast-growing team.
• Opportunity to significantly influence and shape the integration architecture of a next-generation SecOps platform powered by AI and automation.
• Competitive salary, comprehensive benefits, and ample career growth opportunities

Benefits

We pride ourselves in recognizing our employees. Here are some examples of our benefits program:

• Pre-IPO Stock Options
• Medical, Dental & Vision care
• 401(k)
• Employee Assistance Program
• Employee Discount Program
• Life Insurance
• Paid time off
• Referral Program
• Rewards and Recognition Program

The base compensation range for this role is USD 190,000-260,000 per year. Total compensation includes bonus opportunity and equity, and will vary based on candidate location.