Staff Security Engineer
Collective3 months ago
Base Salary
$200k - $260k/yr
Responsibilities
- Own authentication and authorization architecture, including session management, role-based access control, agent-based workflows, and service-to-service communication.
- Drive CCPA compliance by mapping data flows, implementing access and deletion controls, and establishing audit and reporting mechanisms.
- Design and maintain SAST and DAST frameworks integrated into CI/CD pipelines.
- Lead threat modeling for new features and platform changes.
- Define and maintain security standards, policies, and runbooks for engineering teams.
- Lead post-incident security reviews, root-cause analysis, and durable platform improvements.
- Evaluate and integrate third-party security tooling and monitor threats relevant to fintech platforms.
Requirements
- 8+ years of security engineering experience with depth in application security and experience improving the security posture of production platforms at scale.
- Strong expertise in OAuth 2.0, OIDC, SAML, JWT, and user-facing and machine-to-machine authentication flows.
- Hands-on experience building or owning SAST and DAST programs and integrating security testing into CI/CD pipelines.
- Familiarity with Semgrep, Snyk, Burp Suite, or equivalent tools.
- Working knowledge of CCPA and ideally GDPR compliance requirements for SaaS platforms handling personal financial data.
- Experience translating regulatory requirements into concrete engineering controls in collaboration with Legal and Privacy teams.
- Ability to operate as a senior individual contributor who influences platform direction through RFCs, design reviews, and technical leadership.
- Product empathy and ability to balance security rigor with member experience.
- Familiarity with AI-assisted development workflows and interest in the security implications of agent-based systems is a strong plus.
Benefits
- Hybrid work model in San Francisco with in-office and remote flexibility
- Fresh lunch provided on in-office days
- $150 monthly commuter reimbursement for transit expenses
- $200 quarterly health and wellness reimbursement
- Flexible PTO and 14 company holidays
- 100% employee medical, dental, and vision coverage; 75% dependent coverage
- 16 weeks of fully paid parental leave
- 401k plan and equity package
- Quarterly virtual events and an annual in-person summit
Categories
About Collective
Collective is the first all-in-one financial platform designed to give self-employed entrepreneurs the technology and team they need so they can focus on their passion, not their paperwork. Collective handles LLC and S Corp formation, payroll, taxes, monthly bookkeeping, compliance and more all in one place, exclusively for solopreneurs.