# Principal Security Engineer, Privy

**Company**: Privy
**Location**: NYC-Privy
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/stripe/jobs/7947546?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ca94a557-350

## Description

The Principal Security Engineer is a senior individual contributor responsible for defining, building, and operating security programs for high-risk financial technology and crypto infrastructure products. This role leads security architecture and hands-on technical security work across application security, product security, infrastructure security, incident response, vulnerability management, threat modeling, secure software development, and security automation.

Key responsibilities include leading security architecture reviews for embedded wallet systems, conducting advanced threat modeling for web, mobile, cloud, wallet, blockchain, and cryptographic systems, identifying and validating vulnerabilities across applications, infrastructure, APIs, CI/CD pipelines, third-party integrations, and production services.

The Principal Security Engineer is expected to operate independently on ambiguous, high-impact security problems; design scalable security controls; review complex architectures; identify exploitable vulnerabilities; build security tooling; guide engineering teams; and represent security judgment in critical product and platform decisions.

Minimum requirements include 10 years of professional experience in software security, application security, product security, infrastructure security, security engineering, vulnerability research, incident response, or closely related technical security roles, with experience securing production software systems, cloud infrastructure, web applications, APIs, authentication systems, or financial technology platforms.

Preferred qualifications include experience securing cryptocurrency, blockchain, wallet, custody, payment, financial technology, or high-value transaction systems, experience with bug bounty programs, responsible disclosure, penetration testing, red-team findings, or vulnerability research, and experience reviewing cryptographic protocols, transaction signing systems, embedded wallets, smart-contract-adjacent systems, or developer SDKs.

## Skills

### Required
- software security
- application security
- product security
- infrastructure security
- security engineering
- vulnerability research
- incident response
- threat modeling
- secure software development
- security automation
- embedded wallet systems
- web application vulnerabilities
- API security
- authentication
- authorization
- session management
- input validation
- injection flaws
- insecure deserialization
- SSRF
- XSS
- CSRF
- access control failures
- business logic vulnerabilities
- cloud infrastructure
- AWS
- IAM
- network security
- secrets management
- containerized workloads
- CI/CD security
- logging
- monitoring
- production hardening
- cryptographic protocols
- transaction signing systems
- wallets
- blockchain
- smart contracts
- developer SDKs

### Nice to have
- cryptocurrency
- wallet
- custody
- payment
- financial technology
- high-value transaction systems
- bug bounty programs
- responsible disclosure
- penetration testing
- red-team findings
- embedded wallets
- smart-contract-adjacent systems

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/stripe/jobs/7947546?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)