Principal Security Engineer

Gusto; Los Angeles (CA); Hybrid; USD 200,000 - 280,000; Full time

Job summary

A leading company is seeking a Principal Software Engineer to join their Product Security Engineering team. This role involves enhancing customer security through innovative engineering projects and developing security tools. The ideal candidate will have extensive experience in software engineering and a strong understanding of security practices.

Benefits

Stock Options

Health Insurance

401(k)

Qualifications

• 10+ years of Software Engineering experience.
• Experience with authorization strategies like role-based and attribute-based access control.

Responsibilities

• Improve authorization systems at scale.
• Enhance security in core systems.
• Develop software to safeguard customers.

Skills

Software Engineering

Authorization Strategies

High-Availability Systems

Applied Cryptography

Kotlin

Java

Tools

Open Policy Agent

GraphQL

gRPC

Google Tink

Kubernetes

Terraform

Traefik

Job description

About Gusto

Gusto is a modern, online people platform that helps small businesses take care of their teams. We offer full-service payroll, health insurance, 401(k)s, expert HR, and team management tools. With offices in Denver, San Francisco, and New York, we serve over 300,000 businesses nationwide.

Our mission is to create a world where work empowers a better life. We are committed to building a collaborative and inclusive workplace, both physically and virtually. Learn more about our culture and values.

About the Role

We are seeking a Principal Software Engineer to join our Product Security Engineering team. This team has the unique opportunity to lead bold engineering projects across the company to enhance customer security.

The Product Security team enables Gusto to move faster and more securely. We build security tools and services, provide security training and expertise, and promote best practices in authorization and data handling to help developers ship secure code efficiently.

Responsibilities:

1. Improve authorization systems at scale, considering security, engineering, and operational aspects.
2. Enhance security in core systems such as access control, sensitive data storage, and API design.
3. Develop software to safeguard our customers and company.
4. Address impactful engineering challenges across Gusto.
5. Maintain high uptime for critical services.
6. Lead and promote security and engineering excellence within the team.

Qualifications:

1. 10+ years of Software Engineering experience.
2. Experience with authorization strategies like role-based and attribute-based access control.
3. Experience designing high-availability distributed systems and services.
4. Knowledge of applied cryptography, including envelope encryption, AEAD, and ECDSA.
5. Proficiency with Kotlin or Java, with an interest in learning server-side Kotlin.
6. Additional experience with Open Policy Agent, GraphQL, gRPC, Google Tink, Kubernetes, Terraform, Traefik is a plus.

Our targeted cash compensation for this role is $200,000 to $235,000 per year in Denver and most remote locations, and $235,000 to $280,000 per year in New York and the San Francisco Bay Area. Stock options are also offered. Final offers depend on experience and expertise.

Gusto has physical offices in Denver, San Francisco, and New York City. Employees in these locations are expected to work from the office 2-3 days per week. The same applies to roles at our subsidiary, Gusto's Symmetry, based in Scottsdale.

Note: The San Francisco office expectations cover both San Francisco and San Jose metro areas.

Remote work requires a reliable internet connection.

We value diversity and inclusivity, hiring people from varied backgrounds to strengthen our company. If you share our values and enthusiasm for small businesses, you'll find a home at Gusto.

Gusto is an equal opportunity employer. We do not discriminate based on race, color, religion, national origin, age, sex, gender identity, sexual orientation, disability, veteran status, or other protected characteristics. We consider qualified applicants with criminal histories and provide accommodations for individuals with disabilities. For assistance with the application process, please contact us.

We take your privacy seriously. Please review our privacy policy.