See job offer description.
As a Principal Security Engineer at GoDaddy, you will be responsible for identifying security threats in applications and infrastructure, mentoring system owners on remediation, collaborating with SRE and development teams to minimize vulnerabilities, and building reusable security processes and frameworks. You will review quality issues to detect security flaws, scope prospective projects, and take ownership from kickoff through completion. Additionally, you will handle resolution and retesting of complex security events, policy questions, and technical risks. Candidates should have 7+ years of security engineering experience across Security Architecture, Cryptography, Network, Cloud, Mobile, and Web Security, with strong leadership and hands-on technical skills. Proficiency in Secure Development Lifecycle, Security by Design, Shift Left methodologies, Threat Modeling, Architecture Review, Penetration Testing, Code Review, SAST, DAST, and scripting languages such as Python, C, C++, Java, Ruby, and PowerShell is required. The role demands excellent problem-solving and communication skills, with a preference for candidates holding a Bachelors degree in Computer Science or related field; advanced degrees or experience in hosting/cloud and hardware security are a plus. GoDaddy supports a diverse and inclusive culture with comprehensive benefits including paid time off, retirement savings plans, bonus eligibility, equity grants, stock purchase plans, competitive health benefits, parental leave, and various Employee Resource Groups. This position is remote but may occasionally require office visits for events. GoDaddy is an equal opportunity employer committed to diversity, equity, inclusion, and belonging practices. This position is not eligible for candidates in Alaska, Mississippi, North Dakota, or the Virgin Islands and is not open to applicants from California, Seattle, or NYC.