Senior Product Security Engineer — Auth & Data Protection

wine collective; San Francisco (CA); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid Work Model

Fresh Lunch

Transit stipend

Wellness stipend

Flexible PTO

Medical/Dental/Vision coverage

Parental Leave

401k + equity

In-person summit

Job summary

Collective is hiring a Senior/Staff Product Security Engineer to own the authentication and authorization architecture of our member platform. You will ship production-grade security features, including MFA, session management, and access controls, while guiding security-critical changes with RFCs and design reviews.

You will work on protecting member data with encryption, key management, and auditing, and you will lead threat modeling efforts across identity and data-protection systems as the

Qualifications

• 8+ years of software engineering experience focusing on authentication, identity, or data-protection systems.
• Strong backend engineering skills with production code in a modern web stack (Python/Django on AWS).
• Deep knowledge of authentication standards: OAuth 2.0, OIDC, SAML, JWT, and session management.
• Practical cryptography knowledge: envelope encryption, KMS-based key management and rotation.

Responsibilities

• Own end-to-end authentication and authorization architecture for the member platform, including session management and MFA.
• Extend patterns to delegated and agent-based access for AI agents and third parties.
• Design and implement application-layer encryption for member data and documents, with proper key management.

Skills

8+ years software engineering

Backend engineering (Python/Django)

OAuth 2.0 / OIDC / SAML / JWT

Security threat modeling

Tools

Python

Django

AWS

Job description

Collective is hiring a Senior/Staff Product Security Engineer to own the authentication and authorization architecture of our member platform. You will ship production-grade security features, including MFA, session management, and access controls, while guiding security-critical changes with RFCs and design reviews.

You will work on protecting member data with encryption, key management, and auditing, and you will lead threat modeling efforts across identity and data-protection systems as the