We're looking for a Principal Security Engineer to help strengthen and mature engineering security at Aiwyn. This is a hands-on technical leadership role focused on securing our SaaS platform, development infrastructure, and software delivery systems. You'll partner closely with engineering leadership and teams to identify risks, improve security practices, and build the tooling and automation needed to make secure development easier.
🏢 About Aiwyn
Aiwyn is the first complete platform for modern Accounting Firms. Backed by top-tier investors like Bessemer, KKR, and Revolution, we build category-defining technology, and we're doing it with world-class people, processes, and products. We work with the majority of the Top 500 firms in the country. We're replacing brittle, decades-old accounting practice management systems with software accounting firms can actually trust, and we have rare product-market fit in an industry that's about to change permanently.
🎯 The Role
You'll play a key role in advancing our engineering security capabilities, with a particular focus on software supply chain security, vulnerability management, and secure development practices. Working alongside engineering leadership, you'll help shape our security strategy and drive the technical initiatives that support it. We're looking for a strong engineer with security expertise, sound judgment, and a willingness to tackle new challenges.
✅ Key Responsibilities
Improve security across our CI/CD pipelines, build infrastructure, dependencies, and deployment processes.
Own and improve our vulnerability scanning and remediation capabilities, including tooling, automation, prioritization, and integration into engineering workflows.
Partner with engineering teams to strengthen application, cloud, and infrastructure security.
Lead threat modeling and security reviews for critical systems.
Explore how emerging AI capabilities can improve security engineering.
Partner with engineering leadership to identify gaps, prioritize improvements, and establish practical security standards and processes.
Own security initiatives from design through implementation, influence technical decisions, and help build security expertise across engineering.
📌 Required Qualifications
Strong engineering background in software, platform, infrastructure, or security engineering, with hands-on experience building and operating complex systems.
Solid security fundamentals and practical experience improving security in software development, cloud infrastructure, or production environments.
Experience with software delivery security, including CI/CD, vulnerability management, supply chain security, or related areas.
Understanding of SaaS security, including the challenges of protecting customer data, securing applications, and operating cloud-based services.
AI-forward mindset, with an interest in emerging AI security capabilities and an understanding of the opportunities and risks AI introduces.
Technical leadership and ownership, with the ability to drive complex initiatives, collaborate across teams, and balance security with engineering needs.
⭐ Desirable Experience
Familiarity with software supply chain security, including SLSA, SBOMs, artifact signing, or build provenance.
Experience with security scanning and remediation tooling, including SAST, SCA, and container scanning.
Cloud-native security, particularly AWS and Kubernetes.
Threat modeling, application security, identity, or secrets management.
AI-powered security tooling and securing AI-assisted development workflows.
Building or improving security engineering practices in a growing organization.
🎁 Benefits
Competitive compensation and benefits. AI-by-Default - you'll have access to best-in-class AI tools and work in an environment that embraces an AI-by-default mindset, where curiosity and experimentation are part of how we operate. Remote-first organization.
🛂 Visa & Eligibility
No specific visa or eligibility information provided.
