MathWorks logo

Principal Security Engineer

MathWorks

Natick, MA · HybridJob$161–209K/yrPosted 4mo agoSeen in employer's feed 5 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$161–209K/yr
Location
Natick, MAHybrid
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

Bachelor's degree

Job overview

MathWorks is hiring a Principal Security Engineer. MathWorks is seeking a Principal Security Engineer to secure its software delivery pipeline. This hands-on, highly collaborative role involves protecting CI/CD processes, Artifactory, and the Internal Developer Platform from supply chain risks and malware attacks. The engineer will leverage expertise in threat modeling, security architecture, and systems design to shape secure software delivery at scale.

Key focus areas include Design, implement, and continuously improve security controls across CI/CD pipeline, Artifactory, and developer platforms, Collaborate with various teams and key stakeholders to embed security best practices in software delivery workflows, and Lead threat modeling and risk assessments for build and release pipelines.

Successful candidates bring Bachelor's Degree and 10 Years Experience. Important skills include Threat Modeling, Security Architecture, Systems Design, Python, Rust, and Penetration Testing. Preferred (not required): CI/CD Pipeline Security, Artifactory Security, Developer Platform Security, and Security Best Practices.

Skills & qualifications

RequiredNice to have

Skills

Threat ModelingSecurity ArchitectureSystems DesignCI/CD Pipeline SecurityArtifactory SecurityDeveloper Platform SecuritySecurity Best PracticesRisk AssessmentsAutomationKnowledge SharingCoachingPythonRustGoPenetration TestingSecurity ReviewsSDLCModern Attack VectorsDeveloper ToolsInternal Build SystemsDependency SystemsTrusted Software Supply Chain ConceptsSLSADependency ManagementPackage ManagementVulnerability ManagementSigningProvenanceTeamCityJenkinsGitHubGitLabKubernetesCloud Native Computing Foundation ProjectsCollaboration

Qualifications

Bachelor's Degree or Equivalent Experience10 Years Professional Work Experience

Full job description

Team: Product Development

Location: US-MA-Natick

Salary Range: USD 209,000 - 160,800

Job Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

We’re looking for a hands-on, highly collaborative Principal Security Engineer to secure our software delivery pipeline. You’ll take ownership of protecting our CI/CD processes, Artifactory, and Internal Developer Platform against supply chain risks and malware attacks. This is a technical, impact-driven role where your expertise in threat modeling, security architecture, and systems design will shape our approach to secure software delivery at scale.

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

  • Design, implement, and continuously improve security controls across our CI/CD pipeline, Artifactory, and developer platforms

  • Collaborate with various teams and key stakeholders within the organization to embed security best practices in software delivery workflows

  • Lead threat modeling and risk assessments for our build and release pipelines

  • Build and deploy custom security solutions and integrations as needed

  • Monitor, detect, and respond to threats targeting our development infrastructure

  • Drive innovation in automation, security architecture, and systems design

  • Foster a strong security culture through knowledge sharing and mentorship

  • Stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our efforts

Minimum Qualifications

  • A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.

Additional Qualifications

  • Proficiency in programming languages such as Python, Rust, or Go

  • Experience with security threat modeling, penetration testing, and security reviews.

  • Deep understanding of the software development lifecycle (SDLC), particularly in large, complex enterprise environments, and a passion for improving the developer experience

  • Deep understanding of modern attack vectors targeting software supply-chain through malicious code, third-party libraries, and CI/CD systems

  • Advanced knowledge of developer tools, internal build and dependency systems

  • Experience with trusted software supply chain concepts, including security standards and best practices (e.g., SLSA), dependency/package management, vulnerability scanning, signing, provenance, and tools such as TeamCity, Jenkins, GitHub, GitLab, Artifactory, and Kubernetes

  • Experience with Cloud Native Computing Foundation (CNCF) projects related to CI/CD, security, and developer workflow

  • Ability to collaborate with large, distributed engineering teams to contextualize and prioritize supply chain threats

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.

Evaluate my fit