This role pays more than
74%
of similar roles. Most pay
$170,000–$246,150
— the shaded band above.
At the midpoint, this role pays about
$246k
versus about
$208k
for comparable roles.
Based on 240 similar postings.
Employer
About Marqeta
Marqeta is a modern card issuing platform that provides open API technology for businesses to create, issue, and manage customized payment cards, powering payment programs for fintech companies and enterprises. Industry: Financial Technology & Card Issuing
Marqeta currently has
19 open roles
on FindRole.
Listed pay typically runs
$128,700–$160,850
across 14 roles with salary data.
As Marqeta’s Principal Security Engineer, you will lead product security engineering across their payment platform and build an AI security program as they scale generative AI capabilities. Your day-to-day involves threat modeling payment features, securing APIs, developing genAI controls, and ensuring coherent security standards across infrastructure and enterprise domains. You’ll work closely with Product Security, Infrastructure Security, and Security Operations teams to provide technical oversight for endpoint protection, network security, and more. Ideal candidates have over 10 years of security engineering experience, deep expertise in product security, and a strong interest in AI/ML security. Proficiency in Python or similar languages, knowledge of cloud-native environments like AWS, and familiarity with compliance frameworks such as PCI DSS are essential. This role offers the chance to shape how security scales across Marqeta’s organization through tooling and engineering partnerships.
Lead threat modeling and security architecture reviews for payment platform features.
Develop and maintain secure development lifecycle practices for APIs and services.
Build and implement security controls for generative AI and ML systems.
Provide technical oversight for endpoint, network, and enterprise security controls.
Mentor security engineers and raise the organization's overall security maturity.
Communicate complex security risks to executive and board-level audiences.
What we're looking for
10+ years of security engineering experience with technical leadership across multiple domains.
Deep expertise in product security including threat modeling, secure SDLC practices, API security, and authentication/authorization design.
Strong background in AI/ML security, understanding risks like adversarial attacks, model poisoning, prompt injection, data privacy, and AI supply chain threats.
Broad fluency in infrastructure and enterprise security, covering endpoint protection, network security, identity management, and cloud security.
Proven ability to build security frameworks, tools, and programs from the ground up.
Strong programming skills in at least one language (Python, Java, Go) with experience reviewing code across multiple languages.
Microsoft Purview
Microsoft Defender
PowerShell
Python
Power Automate
Azure DevOps
M365
SharePoint Online
Teams
Exchange
Entra ID
Sentinel
Zscaler
Symantec DLP
CI/CD
Cloud Apps