
Senior Security Engineer
About Bridgewater
Bridgewater Associates is a premier asset management firm, focused on delivering unique insight and partnership for the most sophisticated global institutional investors.
Our investment process is driven by a tireless pursuit to understand how the world’s markets and economies work — using cutting edge technology to validate and execute on timeless and universal investment principles.
Founded in 1975, we are a community of independent thinkers who share a commitment for excellence. By fostering a culture of openness, transparency, and inclusion, we strive to unlock the most complex questions in investment strategy, management, and corporate culture.
Explore more information about Bridgewater on our website here.
Our Culture
Bridgewater’s unique success is the direct result of our unique way of being. We want an idea meritocracy in which meaningful work and meaningful relationships are pursued through radical truth and radical transparency. We require people to be extremely open, air disagreements, test each other’s logic, and view discovering mistakes and weaknesses as a good thing that leads to improvement and innovation. It is by continually striving together for the highest levels of truth and excellence that we create meaningful work and meaningful relationships. Within this culture, Diversity and Inclusion is a top priority because it is essential to finding the best talent in the world, enabling our idea meritocracy, and creating an environment where all types of people can thrive. We have a full-time team as well as affinity networks that work on these issues - If you would like to learn more, please let your Bridgewater recruiter know.
Explore more information about Bridgewater’s culture on our website here.
About the Department
The Security Department’s mission is to protect Bridgewater. We constantly evolve our cyber, physical, and staff security practices to meet business needs and stay ahead of the changing threat landscape.
About the Role
Our Engineering organization is seeking a Senior Security Engineer who thrives at the intersection of security, software engineering, and automation. This role focuses on building secure-by-default platforms that enable fast, reliable, and safe software delivery at scale.
You will play a key role in securing CI/CD pipelines, cloud infrastructure, and developer workflows, while partnering closely with DevOps, platform, and application teams to embed security controls directly into code and tooling. This is a highly collaborative, high-impact role where strong technical execution, sound judgment, and the ability to influence within and across teams are critical.
As a Senior Security Engineer, you will contribute to security architecture, help implement best practices, and drive improvements across infrastructure and application security. You’ll work closely with peers and stakeholders to solve complex problems, support secure design decisions, and help advance Bridgewater’s security-first engineering culture.
What You’ll Do
- Partner with application, platform, infrastructure, and cloud teams to ensure secure, scalable delivery of technology solutions
- Design and implement security solutions that are reusable, automated, and adoptable across teams
- Participate in infrastructure, IaC, application, CI/CD, and cloud security reviews
- Embed security controls directly into developer workflows, pipelines, and platforms
- Communicate technical decisions and risk tradeoffs clearly to engineering teams and stakeholders
- Contribute to the design and implementation of security initiatives and improvements
- Advocate for pragmatic security controls that balance risk reduction with developer velocity and business value
- Apply strong technical judgment to solve problems in distributed, cloud-based systems
Core Requirements
- You are a passionate engineer, and:
- Technology has always been part of how you think and learn—whether through personal projects, open-source contributions, or continuous experimentation
- You actively stay current on emerging technologies, modern attack techniques, and evolving security controls
- You take ownership of your work and follow through from design to implementation
- You value direct feedback, intellectual rigor, and collaborative problem-solving
- You believe strong security outcomes come from effective teamwork and shared accountability
- Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience
- 5+ years of experience in security engineering, security architecture, or platform/infrastructure security
- 2+ years of hands-on experience with one or more of the following programming languages: Python, Go, Java, or similar
- Strong experience with modern software development workflows and tools (Git, GitHub/GitLab, CI/CD systems)
- Experience implementing security controls using Infrastructure as Code tools such as Terraform, Ansible, or similar
- Experience securing cloud environments in AWS and/or Azure
- Familiarity with cloud security posture management (CSPM) and runtime security tools (e.g., Wiz or equivalents)
- Solid fundamentals in networking and distributed systems
- Experience working across Linux and Windows environments
- Experience with Kubernetes (EKS and/or AKS)
- Experience using AI-assisted development tools (e.g., Cursor, Claude Code, GitHub Copilot) to:
- Accelerate secure coding and refactoring
- Improve code review quality and consistency
- Prototype security tooling and automation
Preferred Experience
- Hands-on experience with cloud-native and containerized platforms, including Kubernetes, Docker, and serverless technologies
- Experience securing Kubernetes, code repositories, and CI/CD pipelines
- Familiarity with tools such as Kyverno, Gatekeeper, Trivy, TruffleHog, Wiz, or similar
- Experience with Zero Trust architectures and related tooling
- Background in network and application security controls (firewalls, WAFs, proxies, DLP, IDS/IPS)
- Experience participating in threat modeling and secure design reviews
- Exposure to data platforms and securing data pipelines
- Relevant security certifications such as CISSP, CCSP, CKS, GIAC, AZ-500, or AWS Security
Physical Requirements
This role is offered with fully remote flexibility and can be performed from anywhere within the United States. This approach is role specific, and each team will have some slight variations that we will be able to describe in more detail throughout the recruiting process.
Compensation
The wage range for this role is $355,000 - $475,000 inclusive of base salary and discretionary target bonus. The expected base salary for this role is between 70% - 80% of this wage range.
Why Choose Bridgewater?
It takes all types to make Bridgewater great. We seek a diverse group of innovative thinkers and push them to engage in rigorous and thoughtful inquiry. We develop people through an honest examination of their abilities and performance, enabling personal growth and professional development. We strive to provide you opportunities that will challenge you and unlock your potential.
One of our core priorities at Bridgewater is to enable our employees to build a great life and career, and we believe our benefits are an important extension of that philosophy. As such, currently Bridgewater offers a competitive suite of benefits.
Explore more information about Bridgewater’s benefits on our website here.
Bridgewater reserves the right to change its current benefits program at any time, in a manner that is consistent with applicable federal and state regulations.
This job description is not a contract and confers no contractual rights, privileges, or benefits on any applicant or potential applicant. Bridgewater has the right to change any and all terms of this job description, including, but not limited to, job responsibilities, qualifications and benefits. Nothing in this job description constitutes an offer or guarantee of employment. Please note that we do not provide immigration sponsorship for this position.
Bridgewater Associates, LP is an Equal Opportunity Employer
Apply for this job
*
indicates a required field