DigitalBridge is a global leader in digital infrastructure.
About the role
We are hiring a Principal Security Engineer / DevSecOps Lead to own the security posture of our SaaS platforms, cloud environments, and AI-enabled applications. This is a senior hands-on leadership role: you will design and drive the security architecture that protects a regulated, multi-tenant investment platform, embed automated security controls into how we build and ship software, and lead red-team-informed offensive testing that measurably reduces real risk. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 10+ years in information security with deep hands-on DevSecOps and application security expertise, senior-leader scope but still writes code and shipped controls
- Proven design and operation of security for SaaS platforms and cloud environments (AWS and/or Azure) at enterprise scale, including multi-tenant workloads
- Strong background in automated vulnerability management and security testing — SAST/DAST/SCA, IaC/CSPM, container/K8s security, and SBOM/supply-chain tooling
- Demonstrated red - team / o ff ensive security experience: leading engagements, conducting or overseeing adversarial testing, and running purple-team exercises against real production systems
- Deep secure-development expertise: threat modeling (STRIDE/attack trees), secure code review, cryptography fundamentals, identity/OAuth/OIDC, and API security
- Experience securing AI - enabled applications — LLM/agent security, prompt injection, data-leakage controls, and model/tool boundary design
More about this role
We are hiring a Principal Security Engineer / DevSecOps Lead to own the security posture of our SaaS platforms, cloud environments, and AI-enabled applications. This is a senior hands-on leadership role: you will design and drive the security architecture that protects a regulated, multi-tenant investment platform, embed automated security controls into how we build and ship software, and lead red-team-informed offensive testing that measurably reduces real risk. You will partner with SRE, platform, data, and application teams — and directly with the CISO to set the enterprise standard for secure development.
- Own security architecture for our SaaS platforms, multi-cloud environments (AWS, Azure), and AI-enabled applications, including LLM- and agent-based workloads.
- Build and operate a modern DevSecOps program: SAST, DAST, IaC scanning, SBOM/supply-chain (Sigstore, SLSA), secrets detection, container and Kubernetes admission control, and policy-as-code (OPA/Cedar).
- Design and run an automated vulnerability management program that prioritizes by exploitability and business impact, drives closure SLAs, and holds engineering teams accountable through metrics.
- Lead application...
Browse similar: Venture capital jobs · VC platform and IR jobs