About the Role As a Principal Security Engineer at Sage, you will drive improvements spanning the whole SDLC and post-launch operations. You will work with all engineers to develop a strong security culture and capability to ensure that new product/system releases are secure, and that vulnerabilities discovered are quickly and effectively addressed. We are looking for someone with a relevant degree and 10+ years' experience. Location: Bangalore, India. This is a hybrid role, three days per week in the office. Required Skills ● Significant experience in implementing security in the software development lifecycle ● Experience in implementing security in public cloud-based SaaS applications ● OAuth2 / OIDC / JWT validation (RS256, JWKS), token propagation, and multi-issuer auth. ● Secure coding against the OWASP Top 10; multi-tenant isolation and row-level security. ● Proficiency in English, written and verbal ● Experience of working with geographically dispersed teams ● Experience working in an agile, DevOps/DevSecOps environment ● Experience using AI tools to improve security operations, such as AI-assisted code scanning, vulnerability triage, or threat modeling. ● Awareness of AI/ML-specific security and privacy risks (prompt injection, data leakage, model governance) and the ability to fold them into existing secure development lifecycle and compliance practices ● Comfortable partnering with product and engineering teams to assess and mitigate security and privacy risks specific to AI-driven capabilities. ● Experience of formal compliance frameworks (e.g. SOC, ISO27001, PCI or similar) ● Relevant professional security qualifications such as CISSP, CSSLP, AWS Security Specialty or similar. ● Ability to translate technical security risks into clear business implications. ● Experience with security observability,



detection engineering, and incident response. Nice to Have ● Hands-on experience with AWS or Azure, Kubernetes, container security, and infrastructure as code. ● Experience securing large-scale fintech applications, payment systems, or financial integrations. ● Experience designing zero-trust access controls, secure API gateways, and identity and access management solutions. ● Participation in web security CTFs or bug bounty programs, particularly those involving fintech, cloud, or infrastructure. #LI-RT Responsibilities ● Working with all engineers to develop a solid security capability in teams and improving the effectiveness of the overall Security Champion program ● Driving continual improvement in the secure software development lifecycle and supporting our drive to a modern DevSecOps approach ● Acts as the main point of contact on security issues for Product Delivery teams on major strategic groups of products/systems ● Assessing the application to identify security weaknesses and creating improvement plans where required ● Supporting security compliance as it relates to assigned product ● Identifies the need for new tools and vendors and leads their evaluation ● Drives significant improvement in key processes/standards and designs and implements new processes/standards ● Contributes to performance evaluation and technical mentoring of junior team members ● Provides technical security leadership for significant projects or workstreams ● Active contributor to relevant industry bodies, conferences, open-source projects etc. #LI-RT Product Delivery India Bangalore Hybrid Working at Sage means you're supporting millions of small and mid-sized businesses globally with technology to work smarter and move faster. We build software that reduces busywork so customers can spend less time on admin and more time building their business. Our colleagues are high-performers who prioritise growth, make bold choices, and focus and galvanise to get things done. They work on meaningful, market-shaping initiatives that stretch their skills, sharpen their craft, and create real customer impact. Explore our culture and benefits: sage.com/careers/working-at-sage We celebrate individuality and welcome you to join us if you embrace all backgrounds, identities, beliefs, and ways of working. If you need support applying, contact [email protected] . Principal Engineer (security) **Job Description** : **Key Responsibilities** : **Function** : **Country** : **Office Location** : **Work Place type** : **Advert** Equal Employment Opportunity (EEO) Sage is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants with physical and/or mental disabilities. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Sage will be based on merit, qualifications, and abilities. Sage does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age, protected disability, veteran status, sexual orientation, gender identity, genetic information, or any other characteristic protected by applicable law.

📌 Principal Engineer (security) (Bengaluru)
🏢 Sage
📍 Bengaluru