Principal Security Engineer

Cars Commerce

. Report directly to the CISO with executive-level exposure and cross-departmental experience.

Posted 11/9/2026full-timeRemote • United StatesLead💰 $175,800 - $219,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in designing and implementing security architecture, controls, and compliance frameworks across cloud environments and critical infrastructure. Proficient in mentoring teams and integrating security best practices into development processes and incident response strategies.

Highest-signal resume keywords

Security Architecture DesignCloud Security (AWS, Azure, GCP)Scripting (Python, PowerShell, Bash)Security Compliance (PCI DSS, SOC 2, HIPAA)Incident Response Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity Controls ImplementationPenetration TestingSecurity AssessmentsInfrastructure as Code (IaC)DevOps PrinciplesSecure Software DevelopmentAutomated MonitoringThreat DefenseCode Reviews

Soft Skills

CommunicationCollaborationProblem-SolvingMentoring

Tools & Technologies

CloudflareCrowdstrikeProofpointCyberArk EPMBurpSuiteAmazon Security HubGuard DutyInspectorJumpCloudSnyk

Certifications & Qualifications

CISSPCISMAWS Certified Security Specialty

Industry Keywords

Security Compliance FrameworksAgile EnvironmentsDevOps ToolsSecurity PoliciesEmployee Security Training

Tech Stack

Tools & technologies

AWSAzureCloudDockerFirewallsGoogle Cloud PlatformKubernetesPythonSDLC

About the role

Key responsibilities & impact

Report directly to the CISO with executive-level exposure and cross-departmental experience.
Design, implement, and maintain comprehensive security architecture for critical infrastructure, data, and applications.
Design, implement, and maintain security controls and countermeasures across IT and Product Cloud infrastructure.
Collaborate with Product, Engineering, development, operations, and security teams to integrate security best practices into business processes, the SDLC, and CI/CD pipelines.
Lead proactive threat defense and incident response efforts.
Mentor SecOps engineers and provide guidance on security best practices.
Develop and implement security policies, standards, procedures, and employee security training programs.
Conduct security assessments, code reviews, and penetration testing.
Design and implement security controls for IaC, cloud environments, and containerized applications.
Automate security testing and compliance checks using scripting and configuration management tools.
Design and implement automated monitoring and logging across development and deployment pipelines.
Monitor and analyze security events, suspicious activity, indicators of compromise, logs, network traffic, and system configurations.
Investigate incidents, assess scope and impact, identify root causes, and determine the extent of compromise.
Ensure adherence to PCI DSS, HIPAA, SOC 2, and other security compliance frameworks.
Partner with senior leadership to prioritize security initiatives and allocate resources.

Requirements

What you’ll need

Minimum 10 years of experience in information security with a proven track record of success in a similar role.
In-depth knowledge of security principles, technologies, and methodologies (e.g., firewalls, intrusion detection/prevention systems, encryption, IAM).
In-depth understanding of DevOps principles, methodologies, and tools.
Hands-on experience with cloud platforms (e.g., AWS, Azure, GCP), containerization technologies (e.g., Docker, Kubernetes), and infrastructure as code (IaC) tools.
Proficiency in scripting languages such as Python, PowerShell, or Bash.
Familiarity with compliance standards such as PCI DSS, SOC II, and ISO27001.
Excellent communication, collaboration, and problem-solving skills.
Knowledge of secure software development frameworks (e.g., OWASP).
Experience implementing security in Agile and DevOps environments.
Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
Security certifications such as CISSP, CISM, or AWS Certified Security Specialty.
Deep Experience in the following technologies: Cloudflare, Crowdstrike, Proofpoint, CyberArk EPM, BurpSuite, Amazon Security Hub, Guard Duty, Inspector, JumpCloud, Snyk.
Experience in developing security budgets.
Applicants must be authorized to work in the United States; employment visa sponsorship is unavailable.

Benefits

Comp & perks

Medical, dental & vision from day one — no waiting period
401(k) with company match, immediate vesting
Employee Stock Purchase Plan — buy Cars.com stock at a discount
Unlimited Flex Time Off, 11 paid holidays, 1 volunteer day
Paid parental and caregiver leave
$350 one-time home office stipend + $70/month for virtual-first work
Tuition reimbursement up to $5,250/year