Principal Security Engineer

We believe it takes great people to create a great product. That’s why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries.

We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia.

We’re looking for a Principal Security Engineer to join Pipedrive as a technical builder responsible for engineering the security architecture of our SaaS platform, corporate operations and the tools and methods the security team will use. This position is a high-level engineering role focused on building the systems that automate security at scale and simultaneously address the threats to them. The role will also be an active partner across the business acting in an advisory role to both technical and business partners to ensure their vision and objectives can be safely met.

If this sounds like an exciting opportunity, we’d love to chat!

• Engineer and architect scalable security solutions for cloud-native environments to protect customer data, applications, and networks
• Develop autonomous security agents and workflows using LLMs and agentic frameworks to automate complex tasks such as event monitoring and triage, threat modeling, vulnerability discovery and remediation
• Design and build automated identity and access management (IAM), data encryption, and threat detection capabilities that function without manual intervention

• Create technical baselines and security controls for AI-driven products, ensuring data model integrity and the security of training pipelines
• Build defenses against emerging AI-specific threats, such as prompt injection, model inversion, and data leakage, within both customer-facing and internal AI initiatives
• Conduct deep-dive technical reviews of AI architectures to ensure security is embedded into the foundation of every new model and automation project

• Lead the response effort during active security incidents and provide expert analysis when called upon for internal investigations
• As a Principal Security Engineer, you will participate in an off-hours on-call rotation with a 30-minute response SLA - serving as the primary security SME for high-severity alerts, driving swift containment and mitigation, and leading incident orchestration across engineering teams and internal stakeholders when critical security events arise
• Partner with Engineering and SRE teams to engineer security directly into our Platform, CI/CD pipelines and Infrastructure-as-Code (IaC)
• Provide technical mentorship to security and engineering teams, fostering a culture where security is viewed as an engineering challenge to be solved with code
• Ensure that all engineered solutions align with the broader enterprise security strategy

• 7+ years of experience in security engineering, cloud security, or security architecture in a SaaS or cloud-native environment
• Proficiency in at least one programming language with the ability to write and review production-quality code
• Demonstrated ability building with AI: developing with LLM APIs, agentic frameworks or utilizing AI-assisted coding tools to automate engineering workflows
• Deep technical proficiency in cloud security, modern IAM, and network security
• Expertise in Secure SDLC & Dev Sec Ops :
  Strong understanding of building security into automated deployment pipelines and infrastructure
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and…