Libertas Funding

Principal Security Engineer

Greenwich, CT · Principal · Contract

No sponsorship$160k-$225kDetected 2 days ago

AWSCloud PlatformsTerraformCI/CDCybersecurityPenetration TestingNetwork SecuritySOC OperationsComplianceCustomer SupportFirewallResearchUnderwriting

About the role

Security here is built in code and enforced through automation, rather than administered through policy alone.
This is a hands-on, senior individual contributor role for an engineer who codes by craft, thinks like an attacker, and has strong opinions about how environments, networks, pipelines and observability should be built.

Security-by-Design Architecture: Shape the environment, deployment and observability strategy so security, reliability and visibility are designed in from the start.
Identity & A ccess: Own company-controlled identity and access across Okta, Microsoft 365 / Google Workspace, and AWS, consolidating privileged access under least-privilege governance.
Endpoint & Device Security: Own endpoint and device security across the fleet, hardening, patching, encryption, and ensuring all devices are managed and brought under company control.
Tooling & Visibility: Own security tooling and ensure continuous logging, monitoring, and alerting so the environment stays observable and defensible.
You will shape security-by-design architecture and set the security requirements.
Shape the environment, deployment and observability strategy so security, reliability and visibility are designed in from the start.
Own company-controlled identity and access across Okta, Microsoft 365 / Google Workspace, and AWS, consolidating privileged access under least-privilege governance.
Own endpoint and device security across the fleet, hardening, patching, encryption, and ensuring all devices are managed and brought under company control.
Own security tooling and ensure continuous logging, monitoring, and alerting so the environment stays observable and defensible.

7+ years of professional experience in security and software engineering, with significant hands-on time in DevSecOps and cloud security.
Experience with endpoint and device security, including hardening, patching, encryption and managed device approaches.
Working knowledge of security operations fundamentals: logging, monitoring, detection, and incident response.
Applicants must be currently authorized to work in the United States on a full-time basis.
Required
Solid network security fundamental knowledge with firewalls, segmentation, secure remote access, and securing on-premise / corporate network infrastructure.
Working fluency with identity and access management (Okta or equivalent) and modern authentication.
Practical offensive-security ability in threat modelling, penetration testing, or vulnerability research against systems you help build.
Strong software-engineering fundamentals: you write, review, and ship production-quality code and intend to keep doing so.
Proven experience building security into CI/CD pipelines and the SDLC, including secrets management, dependency / image scanning and automated guardrails.
Preferred

Demonstrated hands-on expertise securing cloud environments (AWS strongly preferred), including identity, network, and workload security.
Hands-on experience with infrastructure-as-code and policy-as-code (e.g., Terraform, OPA, or similar).
A collaborative, low-ego working style and the ability to operate independently in a fast-moving, foundational environment.
Depth in offensive security, with practical red-team and / or penetration-testing, experience
Experience in financial services, fintech, or another regulated industry, with familiarity with frameworks such as NIST, SOC 2, GLBA, or FFIEC guidance.

Libertas Funding is an institutional-quality private credit firm headquartered in Greenwich, CT, providing growth capital, revenue-based financing, and working capital solutions to established small and medium-sized businesses nationwide.
Backed by deep institutional banking and credit expertise, Libertas combines proprietary technology and disciplined underwriting with a relationship-first approach, serving as a long-term financial partner to middle-market businesses pursuing acquisitions, expansion, and other strategic growth initiatives.
We seek qualified candidates who work with integrity and excellence, and who value teamwork, customer service, diversity, and accountability.
We are hiring a Principal Security Engineer to own security as an engineering discipline, across our cloud environment, corporate network, and physical infrastructure.
You will set the technical standard by doing the work: hardening the AWS environment, securing the corporate network and physical infrastructure, embedding security into CI/CD and the SDLC, and using an offensive security mindset to find and close weaknesses before adversaries do.

Applicants must be currently authorized to work in the United States on a full-time basis.

This listing is sourced directly from Libertas Funding's careers page and normalized into a canonical job model.