Existing employer? Sign in
MathWorks
Principal Security Engineer
🇺🇸
Natick, Massachusetts
🕑
Full-Time
💰
$154K - $246K
💻
Cybersecurity
🗓️
February 5th, 2026
CI/CD
Kubernetes
Python
Edtech.com's Summary
MathWorks is hiring a Principal Security Engineer to secure their software delivery pipeline. The role involves designing and improving security controls for CI/CD processes, Artifactory, and the Internal Developer Platform, as well as leading threat modeling, risk assessments, and building custom security solutions.
Highlights
- Design and enhance security controls across CI/CD pipelines and developer platforms
- Collaborate with teams to integrate security best practices into software delivery workflows
- Lead threat modeling, risk assessments, and response to development infrastructure threats
- Develop and deploy custom security solutions and automation
- Mentor and promote a strong security culture within the organization
- Proficient in programming languages such as Python, Rust, or Go
- Experienced with security threat modeling, penetration testing, and security reviews
- Strong understanding of SDLC and supply chain security standards like SLSA
- Knowledgeable about developer tools and CI/CD platforms including TeamCity, Jenkins, GitHub, GitLab, Artifactory, and Kubernetes
- Salary range: $153,800 - $246,100 per year
Principal Security Engineer Full Description
Principal Security Engineer
- Team: Product Development
- Location: US-MA-Natick
- Salary Range: $153,800 - $246,100
Job Summary
We’re looking for a hands-on, highly collaborative Principal Security Engineer to secure our software delivery pipeline. You’ll take ownership of protecting our CI/CD processes, Artifactory, and Internal Developer Platform against supply chain risks and malware attacks. This is a technical, impact-driven role where your expertise in threat modeling, security architecture, and systems design will shape our approach to secure software delivery at scale.
Responsibilities
- Design, implement, and continuously improve security controls across our CI/CD pipeline, Artifactory, and developer platforms
- Collaborate with various teams and key stakeholders within the organization to embed security best practices in software delivery workflows
- Lead threat modeling and risk assessments for our build and release pipelines
- Build and deploy custom security solutions and integrations as needed
- Monitor, detect, and respond to threats targeting our development infrastructure
- Drive innovation in automation, security architecture, and systems design
- Foster a strong security culture through knowledge sharing and mentorship
- Stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our efforts
Minimum Qualifications
- A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.
Additional Qualifications
- Proficiency in programming languages such as Python, Rust, or Go
- Experience with security threat modeling, penetration testing, and security reviews.
- Deep understanding of the software development lifecycle (SDLC), particularly in large, complex enterprise environments, and a passion for improving the developer experience
- Deep understanding of modern attack vectors targeting software supply-chain through malicious code, third-party libraries, and CI/CD systems
- Advanced knowledge of developer tools, internal build and dependency systems
- Experience with trusted software supply chain concepts, including security standards and best practices (e.g., SLSA), dependency/package management, vulnerability scanning, signing, provenance, and tools such as TeamCity, Jenkins, GitHub, GitLab, Artifactory, and Kubernetes
- Experience with Cloud Native Computing Foundation (CNCF) projects related to CI/CD, security, and developer workflow
- Ability to collaborate with large, distributed engineering teams to contextualize and prioritize supply chain threats
Similar Jobs
Cybersecurity Analyst
University of Wisconsin - Madison
🇺🇸 Hybrid - Madison, Wisconsin
INFORMATION SECURITY ANALYST
The University of Texas Rio Grande Valley
🇺🇸 Edinburg, Texas
Staff InfoSec Engineer
HMH
🇮🇳 Pune, Maharashtra
Manager of Analyis, Architecture, and Communications
University of North Carolina at Chapel Hill
🇺🇸 Remote - North Carolina
Information Security Compliance Specialist
Docebo
🇨🇦 Hybrid - Toronto, Ontario
