Principal Software Engineer, Security

Coalition, Inc.

5h•$183,000 - $253,300•Remote

About The Position

This role is a Principal-level individual contributor position embedded in the Security Engineering organization, focused on Wirespeed’s most complex detection and integration workflows. The Principal Software Engineer will own critical backend services and integrations end to end, from architecture and design through implementation, rollout, and ongoing quality. They will have broad autonomy to shape the technical direction of Wirespeed’s detection and enrichment stack and will serve as a technical multiplier for the broader engineering team.

Requirements

Significant experience as a backend or platform engineer building distributed systems and cloud-based services in production.
Strong proficiency with TypeScript/Node.js or a similar modern backend language and framework.
Hands-on experience designing and maintaining integrations with third-party APIs or platforms; experience with security tools (EDR, identity, SIEM) is highly preferred.
Solid understanding of security concepts and practices, with expertise in at least one of: endpoint detection and response, identity and access management, SIEM/log analytics, or detection engineering.
Proven ability to design, deliver, and operate complex systems that handle high volumes of data, with strong reliability and observability.
Demonstrated technical leadership, including influencing architecture, mentoring other engineers, and collaborating effectively across teams.
Strong communication skills and a practical, outcome-oriented approach to problem solving.

Nice To Haves

Experience in a cybersecurity, MDR, or related domain is a plus, but not strictly required if the candidate brings strong backend and integration depth and is eager to learn the security domain.

Responsibilities

Lead the design and implementation of core backend services and integrations that power Wirespeed’s detection and enrichment platform.
Own high-impact integrations with key security tools (such as EDR, identity providers, and SIEMs) end to end, including reliability, performance, and long-term maintainability.
Collaborate with detection engineering and security operations to translate detection strategies into robust, production-quality logic and pipelines.
Set technical standards for code quality, testing, and observability, and drive consistent adoption through design and code reviews.
Mentor and guide senior engineers, helping them navigate complex architectural decisions and develop scalable, secure solutions.