Member of Technical Staff — Security

Whop; Palo Alto (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Best in class cash compensation and/or

Equity

Meals, wellness support, and office in

Job summary

Whop in Palo Alto, CA is seeking a Member of Technical Staff - Security to own and ship customer-facing security features and strengthen internal controls. You will work across the stack from application to infrastructure, drive compliance with PCI and SOC 2 concepts, and collaborate with engineers to reduce risk.

The role requires hands-on security expertise, ability to communicate risk to non-technical audiences, and willingness to work in person in Palo Alto for close collaboration.

Qualifications

• Experience building customer-facing security features.
• Ability to explain risk and impact to non-technical audiences.
• Experience across app, infra, and compliance security.

Responsibilities

• Ship customer-facing security features such as device tracking, passkeys, and alerts.
• Harden internal tooling and IAM across AWS and databases; triage vulnerabilities.
• Translate PCI and SOC 2 requirements into scalable controls.
• Own the full security stack and empower other engineers.

Skills

Security engineering

Risk communication

Job description

Member of Technical Staff - Security

Whop · Palo Alto, CA · Full-time, in-person

About Whop

Whop is on a mission to deliver everyone a sustainable income. Today, 50,000 people make money on Whop every month, and Whop users are on track to earn more than $5 billion this year. We are building the infrastructure for the next generation of internet entrepreneurs, and we will keep going until one billion people earn money on Whop every month.

What you'll do

• Ship customer-facing security: Device tracking, passkeys, security notifications, suspicious-login detection - features sellers and buyers actually feel.
• Harden the internals: Improve IAM across AWS, databases, and internal tools; triage and remediate vulnerabilities; put Dependabot, SAST, image scanning, and AI security review into CI.
• Make compliance real: Translate PCI and SOC 2 requirements into scalable controls, and stand up security alerting signals and pipelines.
• Own the full stack of security: application, infra, GRC, and ops - building tools that empower other engineers, not just writing tickets.

Who this is for

• Full-stack security engineers (or software engineers with a security focus) who build solutions, not just audit them.
• People who can explain risk, impact, and exploit scenarios to a broader audience - and take end-to-end ownership.

What we look for

• Comfort working on security across app, infra, compliance, and operations
• Based in (or willing to relocate to) Palo Alto - we build in person

How we work

Whop is a company of about 100 people, most of the team are former founders and entrepreneurs. We give people real agency, meaningful resources, and ownership of hard problems. We expect everyone to move fast, tell the truth, and improve every surface they touch.

• Be technical. Your work should be correct, grounded in fact, and able to withstand scrutiny
• Force function. Solve the root cause and make the system materially better
• Disagree then commit. Debate hard before a decision, then execute together

What Whop offers

• Best in class cash compensation and meaningful equity
• A high trust environment with real ownership and direct access to company leaders
• Meals, wellness support, and office benefits designed for an in-person team

Whop is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for everyone.