Remote Privacy Engineer - Privacy by Design Leader

Asana; San Francisco (CA); Hybrid; USD 235,000 - 267,000; Full time

Benefits offered by this job

Mental health benefits

Career coaching

Family building benefits

Long-term savings plans

In-office meals

Job summary

Asana is seeking a seasoned software engineer to join our Privacy Engineering team and embed privacy-by-design across product features, data stores, and user rights. You will translate GDPR/CCPA requirements into concrete engineering standards, tooling, and privacy controls in collaboration with legal, policy, and product groups.

You will assess privacy risks in AI/ML pipelines, apply cryptographic and de-identification techniques, and help shape our privacy posture at scale while supporting

Qualifications

• 6+ years of software engineering experience, with 3+ years in privacy or data protection.
• Strong understanding of GDPR, CCPA and emerging privacy frameworks.
• Experience building technical data governance controls at scale.
• Familiarity with cryptography, anonymization and de-identification techniques.
• Excellent communication and cross-functional collaboration with legal and policy teams.

Responsibilities

• Lead privacy-by-design reviews for new features and major architectural changes.
• Translate legal requirements into engineering standards, tooling and frameworks.
• Evaluate privacy risks in AI/ML systems and data pipelines.
• Build systems enabling data rights and privacy-enhancing technologies (PETs).
• Conduct privacy impact assessments and threat modeling for high-risk processing.
• Advocate for privacy-preserving solutions across the business.

Skills

Privacy engineering

Security controls

Threat modeling

Data governance

Privacy-by-design

Regulatory knowledge

Cryptography

Cross-functional teamwork

Tools

AI privacy tools

Job description

Asana is seeking a seasoned software engineer to join our Privacy Engineering team and embed privacy-by-design across product features, data stores, and user rights. You will translate GDPR/CCPA requirements into concrete engineering standards, tooling, and privacy controls in collaboration with legal, policy, and product groups.

You will assess privacy risks in AI/ML pipelines, apply cryptographic and de-identification techniques, and help shape our privacy posture at scale while supporting