Senior Backend Security Engineer: Encryption & IAM

Sandbar; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health and dental benefits

401(k)

Unlimited PTO

Equity

Job summary

Sandbar, an interface company in New York City, is hiring a senior/staff backend security engineer to own Stream's privacy and backend security. You will design encryption, key management, and confidential-computing infrastructure while protecting real-time Python services and the broader stack.

You will lead identity and secrets management, CI/CD security, and incident response, collaborating with engineers, auditors, and vendors to meet SOC 2 and other compliance requirements.

Qualifications

• 7+ years experience owning security on production backend services.
• Strong Python and real-time service ownership.
• Applied cryptography expertise.
• Cloud security experience on AWS and/or GCP (IAM, KMS, secrets)
• Incident response leadership on a production service.
• Experience with confidential computing or attestation (e.g. Nitro Enclaves) preferred.
• Strong communication with engineers, founders, auditors, and vendors.

Responsibilities

• Design end-to-end encryption and key management for user data.
• Build confidential-computing infrastructure with attestation and reproducible builds.
• Own identity and secrets across the stack, with least-privilege service identities.
• Own supply chain and CI/CD security.
• Build the detection and response loop: logging, alerts, playbooks, post-incident reviews.
• Drive vendor and data-handling security reviews and data retention policies.
• Lead SOC 2 and related compliance work from engineering side with automated controls.
• Contribute core backend work and review code with a security eye.
• Set direction on secure engineering practices through threat modeling and design reviews.

Skills

Python

Security engineering

Cryptography

Cloud security

Incident response

Security reviews

Communication

Tools

AWS

GCP

KMS

IAM

Secrets management

Job description

Sandbar, an interface company in New York City, is hiring a senior/staff backend security engineer to own Stream's privacy and backend security. You will design encryption, key management, and confidential-computing infrastructure while protecting real-time Python services and the broader stack.

You will lead identity and secrets management, CI/CD security, and incident response, collaborating with engineers, auditors, and vendors to meet SOC 2 and other compliance requirements.