1 day ago
New York, NY, USASenior / Staff+
Base Salary
$190k - $270k/yr
Responsibilities
- Design and ship end-to-end encryption, key management, and encrypted-data search and background processing.
- Build confidential-computing infrastructure with attestation and reproducible builds.
- Own identity, secrets, workload credentials, service identities, environment isolation, and privileged access.
- Own supply-chain and CI/CD security.
- Build audit logging, alerting, runbooks, incident-response processes, and post-incident engineering improvements.
- Lead vendor, AI-provider, third-party integration, OAuth-scope, data-retention, and deletion security reviews.
- Lead engineering-side SOC 2 and related compliance work with automated controls and evidence.
- Build core backend features on real-time Python services and review engineering changes for security.
- Set direction for secure engineering through design reviews, threat models, and practical guidance.
Requirements
- 7+ years building and operating backend systems, including meaningful experience accountable for security on a production service.
- Strong Python skills and experience owning a live real-time service end to end.
- Hands-on applied cryptography experience with envelope encryption, authenticated encryption, and key hierarchies.
- Deep AWS and/or GCP cloud security experience, including IAM, workload identity federation, KMS, secrets management, and audit logging.
- Experience leading production incident response from containment through follow-up hardening.
- Experience with confidential computing or attestation is strongly preferred.
- Experience with document stores and their access-control models.
- Ability to make explicit security-versus-delivery tradeoffs and ship practical controls.
- Precise communication with engineers, founders, auditors, and vendors.
- Nice-to-have experience with iOS security primitives, Bluetooth LE device security, firmware signing, secure pairing, retrieval systems or LLM infrastructure, and SOC 2 or ISO 27001 audits.
Benefits
- Health, vision, and dental benefits.
- Company-sponsored 401(k).
- Unlimited PTO and sick time.
- Early-stage equity.
Tech Stack
About Sandbar
Sandbar builds Stream, a private voice ring and companion software that lets people interact with AI agents and apps hands-free. The company designs hardware, machine-learning models, and consumer software, selling a wearable device with a supporting platform. Founded in 2023 and based in New York City, its team includes alumni of Meta, CTRL-labs, Google, Apple, Fitbit, Peloton, and Equinox.