Principal Security Engineer (DRI)

About TaxDome

At TaxDome, we’re building the #1 practice management platform for accounting firms in the US and globally. Founded in 2017, we’ve grown into a 400+ fully remote team across 40+ countries, serving tens of thousands of businesses worldwide with millions of end clients.

How we work

You’ll be part of a globally distributed team built on trust, ownership, and self-management.

We focus on outcomes over activity — prioritizing clear ownership, pragmatic decision-making, and accountability for results over rigid processes. Collaboration is central to how we operate: we communicate openly, involve the right people early, and continuously improve how we build products and teams together.

About this role

We’re looking for a Principal Security Engineer (DRI) to join our Engineering organization and own application security across TaxDome’s platform during our AI-first engineering transformation. In this role, you’ll define and build the security model for AI-generated software delivery, embed security into product development and release gates, and directly impact product safety, platform resilience, and customer trust.

It’s a fully remote role, we are hiring across European timezones.

What you’ll be responsible for

• Own and drive the Application Security workstream as the security DRI across all Domains and Pods.

• Build automated security controls across the delivery loop, including secret scanning, SAST, SCA, IaC, container, dependency, and DAST gates.

• Embed security into product discovery, threat modeling, acceptance criteria, and architecture decisions.

• Define controls for AI-generated code, including dependency risk, tenant isolation, prompt injection, agent misuse, and risky migrations.

• Own the security reviewer AI agent and improve its detection quality, escalation logic, and coverage.

• Partner on incident response, supply chain security, secrets management, and compliance-related technical controls.

• Raise security maturity through practical guidance, reusable rules, and developer education.

What you bring

Must-have

• 7+ years in Application/Product Security, including senior IC ownership at Staff/Principal level or equivalent.

• Experience securing multi-tenant SaaS products handling sensitive or regulated data.

• Strong hands-on background in DevSecOps and CI/CD security automation.

• Practical experience with AI/LLM security risks and controls.

• Ability to review code and work closely with engineering across modern backend/platform stacks.

• Strong written communication and ability to drive security through influence and clear ownership.

Nice-to-have

• Experience leading security through major engineering transformations such as AI-first, cloud, microservices, or platform-scale change.

• Background in fintech, tax, payments, or other heavily regulated environments.

• Experience building or operating security-focused AI agents in production.

• Strong AWS/GCP, Kubernetes, and cloud/runtime security expertise.

What we offer

At TaxDome, we aim to create an environment where people can do their best work and grow alongside the company.

• Competitive compensation, paid in USD

• Fully remote work with flexible hours

• 30 paid days off annually, plus sick days as needed

• Health & well-being support

• Learning & development budget to support your professional growth

• English lessons reimbursement

• Co-working space reimbursement

• Company-provided equipment (conditions may vary depending on the role)

• A high level of autonomy and ownership in your work

• The opportunity to make a real impact in a fast-growing global SaaS company

• A collaborative, international team with a strong product mindset

If you’re excited about this opportunity and believe you could make an impact at TaxDome, we’d love to hear from you.

Please note, due to the high volume of applications, we are only able to contact shortlisted candidates. We appreciate your interest in the role!