Principal Security Engineer

Join Altruist, a fast-growing fintech company, as a Principal Security Engineer. In this role, you will lead the security operations team, manage the 24x7 security monitoring strategy, and oversee the incident response program. You will also define and report on SecOps metrics, mature detection engineering and response automation capabilities, and drive regular tabletop exercises. The ideal candidate will have 6+ years of experience in security operations, including 2+ years in a leadership role, and a strong technical aptitude.

• Lead, mentor, and grow the security operations / detection & response team, setting priorities and career paths.
• Own our 24x7 security monitoring strategy across our managed detection & response provider and run the incident response program end to end.
• Define and report on SecOps metrics and SLAs (MTTD/MTTR, alert quality, coverage) to security and executive leadership.

• Hands-on incident response and investigations in a cloud-first environment
• Experience - 6+ years in security operations, including 2+ years leading or managing a SOC or detection & response team:
• Resilience - We’re inspired by your unwavering determination to achieve success, no matter the adversity you face along the way
• Experience managing an MDR/MSSP and/or IR retainer relationship
• Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
• Education - A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
• Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others
• Technical aptitude - You’re technologically savvy and comfortable across modern cloud and detection stacks (i.e., AWS, Kubernetes, SIEM query languages, detection-as-code, Terraform, etc.)
• Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives
• Strong ability to lead through influence and operate with urgency
• Creative problem solving - Identifying the problem is simply not enough. You’re instinctually creative with your approach in finding solutions to roadblocks
• Depth with SIEM (Datadog/Splunk), EDR/MDR (CrowdStrike/SentinelOne), and cloud telemetry (AWS)
• If you’re excited about this role, but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways
• Experience working in regulated environments (SEC/FINRA, fintech, or financial services)
• Relevant certifications (e.g., CISSP, GCIH, GCIA, GCFA)
• Experience building or standing up a 24x7 SOC or transitioning to managed detection & response