---
title: 'Principal Product Security Engineer at Cribl'
canonical: 'https://feeny.ai/job/principal-product-security-engineer-cribl-united-states-ndv7jy04tgnb'
type: 'job'
last_seen: '2026-11-11'
---

# Principal Product Security Engineer at Cribl

- **Company:** Cribl
- **Location:** United States
- **Compensation:** $265k–$320k
- **Work type:** remote
- **Posted:** 2026-11-06
- **Last confirmed live:** 2026-11-11
- **Apply:** https://cribl.io/job-detail/?gh_jid=6250011004

## Job description

Join the company that’s building the telemetry infrastructure for the AI era. At Cribl, we partner with IT and Security teams at many of the world’s biggest enterprises, including half of the Fortune 100, to bridge the gap between AI ambition and infrastructure reality. As the AI Platform for Telemetry, we give customers the choice, control, and flexibility to manage and analyze telemetry for both humans and agents, so they can build what’s next.

We’re one of the fastest‑growing private companies and a leading player in a massive, fast‑moving market. With a global workforce, we’re remote‑first and grounded in a simple idea: software is a people business. Cribl is the place where curious, collaborative people can do their best work, grow fast, and bring their full selves to the herd.

## Why You’ll Love This Role

Cribl is looking for a Principal Product Security Engineer to serve as a hands-on technical authority at the intersection of application, cloud, and FedRAMP environment security. You will help secure Cribl’s cloud-native, customer-managed, and hybrid products as they process high-volume data for some of the world’s largest organizations.

As a Principal engineer, impact is defined by reach. You will set long-term direction across teams, resolve critical and ambiguous security problems, advise Engineering and Product leaders, and turn security requirements into secure designs, production-ready patterns, automation, and verified outcomes. This is not a documentation-only compliance role: you will work with Engineering, SRE, Cloud Operations, Compliance, and Product Security Incident Response Team (PSIRT) partners to make regulatory commitments real in product architecture and day-to-day operations.

This is a remote, hands-on individual-contributor role within Engineering. You will lead through expertise and influence, mentor engineers and security partners, and create durable systems that reduce risk while making the secure path easier.

As An Active Member Of Our Team, You Will…

- Set long-term product and cloud security direction across multiple teams, shaping roadmaps, standards, secure-by-default patterns, and risk-informed design and release decisions.
- Lead Product Security Reviews for distributed, multi-tenant SaaS and customer-managed products, including architecture and design review, threat modeling, abuse-case analysis, targeted secure code review, and security test planning.
- Translate risk into concrete engineering requirements, mitigations, tests, and secure defaults; stay engaged through implementation and independently verify that the intended risk reduction was achieved.
- Serve as a principal cloud security authority across IAM and workload identity, organization and account boundaries, network exposure, KMS and encryption, secrets, logging and detection, containers and Kubernetes, serverless services, infrastructure as code, hardening, and data isolation.
- Lead the Product Security component of FedRAMP engineering. Translate FedRAMP Moderate and NIST SP 800-53 control intent into sustainable technical controls and defensible evidence, and partner on authorization-boundary and significant-change decisions, continuous monitoring, vulnerability and change management, POA&M and deviation remediation, incident response, vendor assessments, and 3PAO or assessor interactions.
- Investigate ambiguous signals and vulnerabilities from bug bounty, application and supply-chain scanners, penetration tests, cloud detections, and internal reports; determine exploitability, exposure, and impact; coordinate remediation; validate fixes and bypasses; and hunt for variants and root causes.
- Evolve scalable, risk-adaptive vulnerability management using exposure, exploitability, CISA Known Exploited Vulnerabilities signals, asset criticality, customer impact, and regulatory timelines,not CVSS alone.
- Build and operate durable security capabilities and developer paved roads across CI/CD, SAST, SCA, secrets, infrastructure as code, containers, cloud posture, and testing. Automate repeatable work while preserving explicit human judgment for consequential security decisions.
- Scope and oversee external penetration tests, purple-team exercises, and relevant security vendors; ensure findings become owned, verified engineering outcomes; and provide evidence-based input to build, retain, replace, or retire decisions.
- Lead multi-team work through uncertainty and high-stakes situations, making clear tradeoffs among security, reliability, delivery, customer impact, and compliance while acting with appropriate urgency.
- Communicate complex risks, options, uncertainty, and recommendations in direct, audience-appropriate terms for engineers, senior leaders, customers, assessors, and external partners; represent Cribl credibly when needed.
- Multiply the team by mentoring Product Security engineers, security champions, and engineering partners; create standards, runbooks, automation, and continuity plans that prevent critical capabilities from depending on one person.
- Evaluate and responsibly apply emerging technologies, including AI-assisted security engineering, with measurable outcomes, rigorous verification, secure operating boundaries, and clear human accountability.
- This position will require stand-by, on-call, or off-hours duties.

If You’ve Got It - We Want It

- Typically 10+ years of relevant software security, security engineering, or software engineering experience,or equivalent demonstrated scope and impact,including substantial hands-on Application Security or Product Security and cloud security work.
- Experience securing AI or agentic systems and applying AI responsibly to security engineering workflows.
- A Principal-level track record of setting technical direction across teams, leading multi-quarter initiatives, resolving ambiguous critical problems, and influencing senior Engineering and Product leaders without direct authority.
- Deep, hands-on AWS and Azure security experience in production SaaS or cloud-native systems, including identity and authorization, network controls, encryption and key management, secrets, logging and detection, containers or Kubernetes, serverless services, infrastructure as code, and multi-tenant data isolation.
- Direct experience implementing or operating product and cloud security controls in a FedRAMP-authorized or FedRAMP-bound environment. You understand NIST SP 800-53 control intent and have supported technical control implementation and evidence, continuous monitoring, vulnerability and change management, POA&M or deviation remediation, and assessor interactions.
- Expertise leading security design reviews and threat models for complex applications, APIs, distributed systems, and cloud architectures, with the judgment to turn findings into practical countermeasures and risk-informed release recommendations.
- Strong knowledge of web and application vulnerabilities, exploit techniques, OWASP guidance, authentication and authorization protocols, cryptography, common network protocols, and secure cloud operating models.
- Ability to read production code and build maintainable automation in JavaScript or TypeScript, Python, Go, or a comparable language; willingness to work directly with Engineering to implement and verify security improvements.
- Hands-on vulnerability-response experience, including exploitability analysis, root-cause and variant analysis, remediation design, fix and bypass validation, stakeholder coordination, and incident support.
- Exceptional written and verbal communication, with the ability to make complex risk and tradeoffs clear to engineers, executives, customers, assessors, and external partners.
- A bachelor’s degree in computer science, cybersecurity, or a related field—or equivalent practical experience.
- Preferred qualifications
- Experience securing enterprise data platforms, observability systems, high-volume data pipelines, agents, or customer-managed and hybrid software.
- Experience with AWS GovCloud, FedRAMP Moderate/High, NIST 800-53.
- Experience building developer security platforms, secure-by-default libraries, policy-as-code, or automated guardrails across SAST, SCA, DAST, software supply chain, containers, and cloud posture.
- Public security contributions such as open-source work, published research, CVE credits, standards participation, conference talks, or other demonstrated thought leadership.
- Relevant credentials such as AWS Certified Security – Specialty, CISSP, CCSP, CSSLP, GIAC, or OSCP; demonstrated practical impact matters more than certifications.

## #LI-AM1

#LI-Remote The salary for this role is dependent on geographic location and will be based on the individual candidate's job-related knowledge, skills, and experience.

In addition to base salary, for sales and some sales-adjacent roles, employees are eligible to earn incentive compensation (commission). For all other roles, employees are eligible to participate in the Cribl Corporate Bonus Program.

In addition to a competitive salary, Cribl also offers a generous benefits package which includes health, dental, vision, short-term disability, and life insurance, paid holidays and paid time off, a fertility treatment benefit, 401(k), and equity.

Base Salary Range $265,000—$320,000 USD

Bring Your Whole Self

Diversity drives innovation, enables better decisions to support our customers, and inspires change for the better. We’re building a culture where differences are valued and welcomed, and we work together to bring out the best in each other. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying.

Interested in joining the Cribl herd? Learn more about the smartest, funniest, most passionate goats you’ll ever meet at [cribl.io/about-us](https://cribl.io/about-us/).

## About Cribl

## Company Overview
- **One-liner**: Cribl is the AI Platform for Telemetry, providing a vendor-agnostic platform to manage, route, shape, store, and analyze IT and security telemetry data at scale.
- **Entity Type**: Private (Series E, $3.5B valuation as of January 2026)
- **Headquarters**: San Francisco, California, USA
- **Founded**: 2018
- **Founders**: Clint Sharp, Dritan Bitincka, and Ledion Bitincka

## Core Business
- **Primary industries**: IT operations, observability, security (SIEM/SOC), data infrastructure
- **Target customers**: B2B, primarily large enterprises (50% of the Fortune 100), government agencies
- **Mission / purpose**: "Give customers the choice, control, and flexibility to manage, investigate, and analyze telemetry for both humans and agents, with no lock‑in, no data loss, and no compromises."

## Products & Services
- **Cribl Stream**: Data routing and shaping pipeline for collecting, processing, and forwarding telemetry to any destination.
- **Cribl Edge**: Lightweight agent for collecting and forwarding telemetry from edge environments.
- **Cribl Search**: Vendor-agnostic search-in-place analytics tool that queries data across multiple sources without moving it.
- **Cribl Lake**: Low-cost object storage tiering for telemetry data.
- **Cribl Lakehouse**: Next-generation architecture for IT and security data combining lake storage with query capabilities.
- **Cribl.Cloud**: SaaS platform for onboarding data to logging tools, metrics databases, and cloud data warehouses.
- **Agentic AI enhancements**: AI-powered investigations and automation for SREs and security teams.

All products are offered as SaaS, self-managed software, or hybrid deployments.

## Market Standing
- **Valuation**: $3.5 billion (Series E, January 2026)
- **Key Metric**: $300M+ Annual Recurring Revenue (ARR) as of December 2025
- **Total Funding**: $319M Series E (Jan 2026), $150M Series D (led by Tiger Global Management), $200M Series C (led by Greylock and Redpoint Ventures), $35M Series B (led by Sequoia Capital), $7.4M Series A, $4M Seed
- **Notable Investors/Partners**: Sequoia Capital, Greylock, Redpoint Ventures, Tiger Global Management, CRV; customers include half of the Fortune 100
- **Growth Signals**: Surpassed $300M ARR; previously grew 70%+ YoY; achieved FedRAMP Authority to Operate (March 2026); ranked #1 on Forbes’ List of America’s Best Startup Employers (2024); 1,400+ employees

## Competitive Advantages
- **Vendor-agnostic architecture**: No lock‑in to any single data platform or cloud provider.
- **Search-in-place capability**: Query data where it resides (cheap storage, existing tools) without costly data movement.
- **End-to-end telemetry platform**: Combines ingest, routing, storage, search, and AI in one unified product suite.
- **Enterprise scale**: Proven with 50% of the Fortune 100 and government agencies (FedRAMP authorized).

## Strategic Focus
- **AI-era infrastructure**: Building the telemetry foundation for copilots, agents, and AI-driven investigations.
- **Agentic AI enhancements**: Adding autonomous investigation and automation features to Cribl Search.
- **Product expansion**: Growing Cribl Lakehouse and Cribl.Cloud for simplified data management.
- **Government and regulated markets**: Leveraging FedRAMP authorization to expand in the public sector.
- **Continued growth**: Scaling headcount, ARR, and customer base while maintaining a strong culture.

## Why Work Here
- **Culture**: Emphasizes “Get Real” (authenticity), “Output > Input” (results over hours), “Excellence over Perfection” (progress over polish), and “All Hooves on Deck” (collaboration).
- **Remote-first**: Designed for asynchronous work, detailed documentation, and life‑friendly flexibility. Company and team offsites happen a few times a year.
- **Career growth**: Rotational programs, mentorship, clear career pathways, and a focus on helping employees “do your best work.”
- **Perks & benefits**: Competitive salary, stock options, comprehensive benefits tailored by country. 9 Employee Resource Groups with >45% employee participation.
- **Engineering focus**: “Build high-quality products that empower customers”; bar raisers given projects, guidance, and roadmaps.
- **Awards**: Voted best place to work by Forbes, with strong employee satisfaction scores.

## Sources
1. [cribl.io/about-us](https://cribl.io/about-us/)
2. [cribl.io](https://cribl.io/)
3. [cribl.io/careers](https://cribl.io/careers/)
4. [cribl.io/careers/culture-at-cribl](https://cribl.io/careers/culture-at-cribl/)
5. [cribl.io/careers/engineering](https://cribl.io/careers/engineering/)

## Other roles at Cribl

- [Sales Engineer, Global System Integrators (GSIs)](https://feeny.ai/job/sales-engineer-global-system-integrators-gsis-cribl-united-states-r2c6wzsnn54a) — United States
- [Regional Sales Manager, St Louis (Enterprise)](https://feeny.ai/job/regional-sales-manager-st-louis-enterprise-cribl-st-louis-d9c577y2kvn0) — St Louis, MO
- [Regional Sales Manager, Houston (Enterprise)](https://feeny.ai/job/regional-sales-manager-houston-enterprise-cribl-houston-r4zh67zbxq2q) — Houston, TX
- [Regional Sales Manager, New Zealand (Enterprise)](https://feeny.ai/job/regional-sales-manager-new-zealand-enterprise-cribl-new-zealand-qgay16jnx87s) — New Zealand
- [Regional Director Sales, Boston (Enterprise)](https://feeny.ai/job/regional-director-sales-boston-enterprise-cribl-boston-rk69r216pjpa) — Boston, MA
- [Tax Manager](https://feeny.ai/job/tax-manager-cribl-united-states-pb34hb1vfpr1) — United States
- [Sr Staff Site Reliability Engineer](https://feeny.ai/job/sr-staff-site-reliability-engineer-cribl-australia-je6kgtrraq62) — Australia
- [Customer Success Engineer, West Region](https://feeny.ai/job/customer-success-engineer-west-region-cribl-denver-casf2f5gsacz) — Denver, CO
- [Sr Business Effectiveness Manager, AI](https://feeny.ai/job/sr-business-effectiveness-manager-ai-cribl-united-states-hcn2gjpa6nr7) — United States
- [Regional Sales Manager, Michigan (Enterprise)](https://feeny.ai/job/regional-sales-manager-michigan-enterprise-cribl-detroit-x4v06pfz5by2) — Detroit, MI