Security Principal Engineer

Levi Strauss & Co. is a company that values individuality and making a positive impact. They are seeking a Principal Engineer for their Global Information Security organization to architect and build AI-powered security capabilities, focusing on threat intelligence automation and security alert triage.

Responsibilities:

• Support the enterprise agentic AI platform, defining and governing how every agent at LS&Co. is built, deployed, and governed, regardless of cloud provider, model, or builder team
• Architect and engineer a production-grade multi-agent AI platform to orchestrate specialized security agents across the GIS
• Lead the design and implementation of the AI Gateway as the central enforcement point for all LLM and agent traffic
• Architect the agent identity and registry system to eliminate shadow AI and orphaned agents across the estate
• Establish the audit and observability architecture for agent workloads
• Own cross-platform guardrails and data protection standards
• Build AI-powered enrichment and analysis pipelines integrated with our security stack
• Define engineering standards, design review processes, and architectural patterns for the AI & Security Engineering practice
• Establish organizational accountability structures for platform component ownership, partnering with Platform Engineering, Infrastructure, and Security to define clear ownership boundaries, contribution standards, and governance operating models that scale beyond a single team

Requirements:

• 10+ years of professional software engineering experience with expert proficiency in Python; demonstrated track record designing and delivering complex, distributed, cloud-native systems at scale
• Hands-on experience building and shipping agentic AI applications beyond proof-of-concept
• Practical proficiency with AI orchestration frameworks (Semantic Kernel, LangChain, ADK, etc.) and RAG pipeline design, including embedding strategies, hybrid search, and LLM evaluation methodology
• Solid grasp of security operations concepts: threat intelligence workflows, detection engineering and SIEM query languages (KQL, SPL, YARA-L, etc.), MITRE ATT&CK, vulnerability management, and API-based integration with security platforms
• Strong architecture and leadership instincts: you write RFCs, lead design reviews, make well-reasoned build-vs-buy decisions, and can communicate technical complexity to both engineering peers and executive audiences
• Operates effectively as a principal-level individual contributor who is comfortable driving technical alignment without direct organizational authority
• Genuine, demonstrable passion for AI and agentic systems; not just aware of the landscape, but actively experimenting, building, and thinking about what AI can and cannot reliably do today
• Experience with infrastructure-as-code and CI/CD in regulated or high-assurance environments; familiarity with cloud security best practices including managed identity, Key Vault, and least-privilege design