5 months ago
Responsibilities
- Own Hightouch’s application security posture and define the security function from the ground up.
- Develop and improve multi-tenant and sub-tenant isolation, access control, and authorization for high-throughput systems.
- Build and refine security architecture for compute isolation, threat modeling, and product hardening.
- Improve protection for internet-facing APIs through rate limiting, abuse detection, and granular access controls.
- Support the multi-region and multi-cloud backend, including launches in new regions for data residency requirements.
- Identify high-leverage security problems, own the roadmap, and implement production fixes directly in the codebase.
- Drive security programs through bug bounty and penetration testing engagements, external researcher collaboration, and partnership with engineering teams.
Requirements
- Experience as an early security hire, ideally among the first one to three security hires at a SaaS or data infrastructure company.
- Ability to read application code, threat model distributed systems, and ship production security fixes.
- Significant expertise in distributed systems and the ability to influence product engineering teams credibly.
- Experience securing multi-tenant platforms, including tenant isolation and authorization models.
- Experience with cloud security across multiple clouds and customer-owned accounts.
- Experience designing and building data infrastructure as an early engineer and securing it from initial design or during major redesigns.
- Knowledge of privacy-adjacent security topics, including PII handling, data residency, and GDPR/CCPA technical controls.
- Experience running security programs involving bug bounties, penetration testing, external researchers, and engineering adoption; certifications are not required.
Tech Stack
DatabricksSnowflake
Categories
About Hightouch
Hightouch builds a composable customer data platform and agentic marketing tools that let companies activate data from their warehouses for targeting, analytics, and campaigns. It sells SaaS used by marketing and data teams, including reverse ETL, identity resolution, and real-time audiences across ads, email, and product channels. Founded in 2019 in San Francisco, it is privately held and counts Domino’s, Spotify, and Ramp among customers.