Staff Security Engineer
Collectiveabout 5 hours ago
Base Salary
$200k - $260k/yr
Responsibilities
- Own the authentication and authorization architecture across the member platform.
- Drive CCPA compliance by mapping data flows and implementing access controls.
- Design and maintain static and dynamic application security testing frameworks.
- Lead threat modeling for new features and platform changes.
- Define and maintain security standards and policies for engineering teams.
- Respond to and lead post-incident security reviews.
- Evaluate and integrate third-party security tooling.
Requirements
- 8+ years of security engineering experience with a focus on application security.
- Strong expertise in authentication and authorization systems like OAuth 2.0 and SAML.
- Hands-on experience with SAST/DAST programs and CI/CD security testing.
- Working knowledge of CCPA and ideally GDPR compliance requirements.
- Experience collaborating with Legal and Privacy teams on regulatory requirements.
- Ability to operate as a senior individual contributor influencing platform direction.
- Product empathy to balance security rigor with member experience.
Benefits
- Hybrid work model with in-office and remote flexibility.
- Fresh lunch provided on in-office days.
- $150 monthly reimbursement for transit expenses.
- $200 quarterly reimbursement for health and wellness.
- Flexible PTO plus 14 company holidays.
- 100% medical, dental, and vision coverage for employees.
- 16 weeks fully paid parental leave.
- 401k plan plus an equity package.
- Quarterly virtual events and an annual in-person summit.