[Hiring] Principal Product Security Engineer @Cribl

Role Description

Cribl is looking for a Principal Product Security Engineer to serve as a hands-on technical authority at the intersection of application, cloud, and FedRAMP environment security. You will help secure Cribl’s cloud-native, customer-managed, and hybrid products as they process high-volume data for some of the world’s largest organizations.

As a Principal engineer, impact is defined by reach. You will:

• Set long-term direction across teams.
• Resolve critical and ambiguous security problems.
• Advise Engineering and Product leaders.
• Turn security requirements into secure designs, production-ready patterns, automation, and verified outcomes.

This is a remote, hands-on individual-contributor role within Engineering. You will lead through expertise and influence, mentor engineers and security partners, and create durable systems that reduce risk while making the secure path easier.

As An Active Member Of Our Team, You Will:

• Set long-term product and cloud security direction across multiple teams.
• Lead Product Security Reviews for distributed, multi-tenant SaaS and customer-managed products.
• Translate risk into concrete engineering requirements, mitigations, tests, and secure defaults.
• Serve as a principal cloud security authority across various domains.
• Lead the Product Security component of FedRAMP engineering.
• Investigate ambiguous signals and vulnerabilities from various sources.
• Evolve scalable, risk-adaptive vulnerability management.
• Build and operate durable security capabilities and developer paved roads.
• Scope and oversee external penetration tests and security vendors.
• Lead multi-team work through uncertainty and high-stakes situations.
• Communicate complex risks, options, uncertainty, and recommendations.
• Multiply the team by mentoring Product Security engineers and partners.
• Evaluate and responsibly apply emerging technologies.

This position will require stand-by, on-call, or off-hours duties.

Qualifications

• Typically 10+ years of relevant software security, security engineering, or software engineering experience.
• Experience securing AI or agentic systems.
• A Principal-level track record of setting technical direction across teams.
• Deep, hands-on AWS and Azure security experience in production SaaS or cloud-native systems.
• Direct experience implementing or operating product and cloud security controls in a FedRAMP-authorized environment.
• Expertise leading security design reviews and threat models for complex applications.
• Strong knowledge of web and application vulnerabilities, exploit techniques, and secure cloud operating models.
• Ability to read production code and build maintainable automation in various programming languages.
• Hands-on vulnerability-response experience.
• Exceptional written and verbal communication skills.
• A bachelor’s degree in computer science, cybersecurity, or a related field.

Requirements

• Experience securing enterprise data platforms, observability systems, high-volume data pipelines, agents, or customer-managed and hybrid software.
• Experience with AWS GovCloud, FedRAMP Moderate/High, NIST 800-53.
• Experience building developer security platforms, secure-by-default libraries, or automated guardrails.
• Public security contributions such as open-source work or published research.
• Relevant credentials such as AWS Certified Security – Specialty, CISSP, CCSP, CSSLP, GIAC, or OSCP.

Benefits

• Health, dental, and vision insurance.
• Short-term disability and life insurance.
• Paid holidays and paid time off.
• Fertility treatment benefit.
• 401(k) and equity.

Company Description

Cribl is a remote-first company that values curious, collaborative people who can do their best work, grow fast, and bring their full selves to the herd.