Senior/Staff Security Engineer

Responsibilities

• Design and ship end-to-end encryption, key management, and encrypted-data search and background processing.
• Build confidential-computing infrastructure with attestation and reproducible builds.
• Own identity, secrets, workload credentials, service identities, environment isolation, and privileged access.
• Own supply-chain and CI/CD security.
• Build audit logging, alerting, runbooks, incident-response processes, and post-incident engineering improvements.
• Lead vendor, AI-provider, third-party integration, OAuth-scope, data-retention, and deletion security reviews.
• Lead engineering-side SOC 2 and related compliance work with automated controls and evidence.
• Build core backend features on real-time Python services and review engineering changes for security.
• Set direction for secure engineering through design reviews, threat models, and practical guidance.

Requirements

• 7+ years building and operating backend systems, including meaningful experience accountable for security on a production service.
• Strong Python skills and experience owning a live real-time service end to end.
• Hands-on applied cryptography experience with envelope encryption, authenticated encryption, and key hierarchies.
• Deep AWS and/or GCP cloud security experience, including IAM, workload identity federation, KMS, secrets management, and audit logging.
• Experience leading production incident response from containment through follow-up hardening.
• Experience with confidential computing or attestation is strongly preferred.
• Experience with document stores and their access-control models.
• Ability to make explicit security-versus-delivery tradeoffs and ship practical controls.
• Precise communication with engineers, founders, auditors, and vendors.
• Nice-to-have experience with iOS security primitives, Bluetooth LE device security, firmware signing, secure pairing, retrieval systems or LLM infrastructure, and SOC 2 or ISO 27001 audits.

Benefits

• Health, vision, and dental benefits.
• Company-sponsored 401(k).
• Unlimited PTO and sick time.
• Early-stage equity.