Principal Security Engineer

About the role

We're looking for a Principal Security Engineer to join Pipedrive as a technical builder responsible for engineering the security architecture of our SaaS platform, corporate operations and the tools and methods the security team will use. This position is a high-level engineering role focused on building the systems that automate security at scale and simultaneously address the threats to them.

What you'll do

• Engineer and architect scalable security solutions for cloud-native environments to protect customer data, applications, and networks
• Develop autonomous security agents and workflows using LLMs and agentic frameworks to automate complex tasks such as event monitoring and triage, threat modeling, vulnerability discovery and remediation
• Design and build automated identity and access management (IAM), data encryption, and threat detection capabilities that function without manual intervention
• Create technical baselines and security controls for AI-driven products, ensuring data model integrity and the security of training pipelines
• Build defenses against emerging AI-specific threats, such as prompt injection, model inversion, and data leakage
• Lead the response effort during active security incidents and provide expert analysis for internal investigations
• Partner with Engineering and SRE teams to engineer security directly into our Platform, CI/CD pipelines and Infrastructure-as-Code (IaC)
• Provide technical mentorship to security and engineering teams, fostering a culture where security is viewed as an engineering challenge to be solved with code

What you'll need

• 7+ years of experience in security engineering, cloud security, or security architecture in a SaaS or cloud-native environment
• Demonstrated ability building with AI: developing with LLM APIs, agentic frameworks or utilizing AI-assisted coding tools to automate engineering workflows
• Deep technical proficiency in cloud security, modern IAM, and network security
• Expertise in Secure SDLC & DevSecOps: Strong understanding of building security into automated deployment pipelines and infrastructure
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences

What they offer

• Flexible hours and wellness perks
• 28 paid leave days, well-being days, and compassionate leave
• Performance-based bonuses
• Mentorship, coaching, and internal mobility opportunities
• Open, honest feedback and clear communication culture