FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Principal Engineer
Thomson Reuters. Set technical direction for how CoCounsel earns and maintains trust for privileged, sensitive, and regulated data .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in building and maintaining compliance-critical systems, with a strong focus on SOC 2, ISO 27001, HIPAA, and FedRAMP requirements. Proficient in backend engineering, encryption, and identity management, while effectively collaborating with cross-functional teams to ensure secure and resilient architectures.
Highest-signal resume keywords
SOC 2 ComplianceISO 27001 ComplianceFedRAMP AuthorizationBackend Engineering in Python, Java, GoIdentity and Access Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
SOC 2 Type IIISO 27001HIPAA ComplianceEncryptionKey ManagementAudit LoggingNIST 800-53NIST CSFCIS BenchmarksPolicy-as-Code
Soft Skills
Excellent CommunicationMentoringCollaboration
Tools & Technologies
AWSVantaDrataOneTrustSSOSAMLOIDCOAuth 2.0RBACABAC
Certifications & Qualifications
CISSPCISMCCSP
Industry Keywords
Regulated IndustriesSensitive DataCompliance AutomationSecurity InitiativesAI/LLM Systems
Tech Stack
Tools & technologiesAWSCloudJavaPythonGo
About the role
Key responsibilities & impact- Set technical direction for how CoCounsel earns and maintains trust for privileged, sensitive, and regulated data
- Own architecture and engineering practices behind SOC 2, ISO 27001/42001, HIPAA, and FedRAMP programs
- Understand and evolve technical controls across infrastructure, data pipelines, and AI systems
- Translate compliance requirements into resilient, well-instrumented systems
- Replace manual audit preparation with automated evidence collection, continuous control monitoring, and policy-as-code
- Design encryption, key management, data residency, tenant isolation, and audit logging for production systems
- Partner with Security, Legal, Privacy, Product, platform, identity, and AI/ML engineering teams
- Translate regulatory and contractual requirements into engineering roadmaps
- Mentor staff and senior engineers on secure-by-design development, threat modeling, and incident response
- Establish SLOs, observability, and incident response practices for compliance-critical systems
- Build dashboards, alerting, and control-testing tools for real-time confidence in the control environment
Requirements
What you’ll need- Bachelor's Degree in Computer Science, Computer Engineering, a related field, or equivalent experience
- Direct, hands-on experience building or operating production systems that achieved and maintained SOC 2 Type II, ISO 27001 and/or 42001, and HIPAA compliance
- Experience supporting a FedRAMP authorization process at the Moderate or High baseline
- Deep backend engineering expertise in Python, Java, Go, or similar
- Experience with production systems on a major cloud provider, AWS preferred
- Working knowledge of NIST 800-53, NIST CSF, or CIS Benchmarks
- Hands-on experience with identity and access management, including SSO, SAML, OIDC, OAuth 2.0, RBAC/ABAC
- Experience with encryption and key management
- Experience with audit logging
- Proven track record owning large, complex compliance or security initiatives end-to-end
- Excellent communication skills and ability to partner with auditors, security, legal, product, and engineering teams
- Preferred: FedRAMP ATO with JAB or agency sponsorship, 3PAO and federal agency security team interaction
- Preferred: GRC and compliance automation tooling such as Vanta, Drata, OneTrust, or comparable platforms
- Preferred: Experience in regulated industries handling sensitive data
- Preferred: CISSP, CISM, CCSP, or similar certifications
- Preferred: Experience building compliance and security controls for AI/LLM systems
Benefits
Comp & perks- Flexible hybrid working environment
- Work from anywhere for up to 8 weeks per year
- Flexible vacation
- Two company-wide Mental Health Days off
- Access to the Headspace app
- Retirement savings
- Tuition reimbursement
- Employee incentive programs
- Mental, physical, and financial wellbeing resources
- Two paid volunteer days off annually
- Pro-bono consulting project opportunities
- Environmental, Social, and Governance (ESG) initiative opportunities
- Health, dental, vision, disability, and life insurance programs
- Competitive 401k plan with company match
- Competitive vacation, sick and safe paid time off
- Paid holidays, including two company mental health days off
- Parental leave
- Sabbatical leave
- Optional hospital, accident and sickness insurance paid 100% by the employee
- Optional life and AD&D insurance paid 100% by the employee
- Flexible Spending and Health Savings Accounts
- Fitness reimbursement
- Employee Assistance Program
- Group Legal Identity Theft Protection benefit paid 100% by employee
- Access to 529 Plan
- Commuter benefits
- Adoption & Surrogacy Assistance
- Employee Stock Purchase Plan
- Annual Bonus based on enterprise and individual performance (role may be eligible)