About the role
About Ethos
Ethos (Nasdaq: $LIFE) is a leading life insurance technology company on a mission to protect families by democratizing access to life insurance and empowering agents at scale. With its robust three-sided technology platform, Ethos is transforming the life insurance experience for consumers, agents, and carriers alike. Ethos offers instant, accessible products and a seamless online process that requires no medical exams and just a few health questions; it eliminates traditional barriers, making it easier than ever for everyone to protect their families. Ethos is redefining how life insurance is bought, sold, and underwritten.
About the Role
We’re seeking a Staff/Principal Security Engineer with deep expertise in application security, AI security, and security architecture to join our growing security team. This role reports directly to the CISO. You’ll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks — including AI-powered tooling — guiding both strategic security initiatives and day-to-day security engineering operations.
This is a high-impact role that will shape the security posture of our platforms and development practices, working across engineering, DevOps, architecture, and compliance teams.
Responsibilities
Core Security Engineering
- Design and implement secure architectures for applications, APIs, microservices, and containerized workloads.
- Develop and enforce application security best practices across SDLC; partner with DevOps and engineering teams to integrate security into CI/CD pipelines.
- Conduct threat modeling, security design reviews, and risk assessments for new and existing systems.
- Evaluate and implement security tools, controls, and frameworks
- Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel.
- Lead response to complex security incidents or architectural flaws; conduct root cause analysis and recommend strategic remediations.
- Contribute to and influence security policies, standards, and governance.
- Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations.
AI Security
- Own the AI security program, including risk frameworks, threat models, and governance policies for AI/ML systems and LLM integrations.