Principal Security Engineer

Security at Parloa isn't an afterthought — it's foundational to how we build and operate an AI platform that enterprises trust with sensitive voice and chat data at scale. As Principal Security Engineer, you'll set the technical direction for security across our engineering organisation: from secure architecture and threat modelling, to embedding security thinking into how a fast-growing AI company designs, builds, and ships.

What you'll do

• Own the technical security engineering strategy across Parloa's platform, infrastructure, and AI/ML systems
• Lead deep threat modelling and architecture reviews for new and existing systems, including LLM-based and voice/chat AI pipelines
• Drive secure-by-design practices into the software development lifecycle, partnering closely with engineering teams
• Design and improve detection, monitoring, and incident response capabilities across cloud and AI infrastructure
• Guide security architecture for multi-tenant, sensitive data flows across Parloa's enterprise customer base
• Support compliance and governance efforts (e.g. SOC 2, ISO 27001) by ensuring technical controls are sound and well-documented
• Mentor senior+ engineers and security practitioners, building security capability across the wider organisation

What you'll need

• Extensive experience (15+ years) in security engineering, with demonstrated impact at Staff or Principal level
• Deep expertise in application security and/or cloud security, threat modelling, and secure architecture for distributed, cloud-native systems
• Hands-on experience with cloud security across AWS, GCP, or Azure, and container orchestration (Kubernetes)
• Strong understanding of identity and access management, encryption, and secure data handling at enterprise scale
• Experience securing systems handling sensitive or regulated data, ideally with exposure to GDPR or similar frameworks
• Track record of driving security strategy and influencing engineering culture across an organisation
• Excellent communication skills, able to explain security risk and trade-offs clearly to engineers, leadership, and customers

Nice to have

• Genuine curiosity about AI systems and a willingness to dig into the emerging security challenges they introduce