Senior Security Architect – Biometric Identity

Xident B.V.; Northern (KY); Hybrid; USD 140,000 - 230,000; Full time

Job summary

Xident B.V. in the United States (remote-first) is seeking a Senior Security Engineer to protect our platform and biometric data. You will architect and enforce security across APIs, ML pipelines, and data in transit and at rest.

You will lead encryption, compliance programs (SOC 2, GDPR, CCPA, BIPA), and implement WebAuthn. The role combines hands-on security with influencing engineering culture in a fast-growing, globally distributed team.

Qualifications

• 7+ years of security engineering experience.
• Deep knowledge of app security, cryptography, and secure API design.
• Experience with security tools integrated into CI/CD pipelines.
• Understanding of SOC 2, GDPR, CCPA, and biometric data regulations.
• Hands-on WebAuthn/FIDO2 security model knowledge.
• Strong communication skills to drive security culture.

Responsibilities

• Lead security architecture reviews for new API endpoints, SDK features, and ML pipelines.
• Own encryption for data at rest (AES-256-GCM), TLS everywhere, and signed challenges.
• Conduct regular penetration testing, code audits, and dependency vulnerability assessments.
• Drive SOC 2, GDPR, and biometric data compliance initiatives.
• Implement WebAuthn/passkey security across dashboards and admin.
• Develop threat models for anti-spoofing, API abuse, and credential stuffing.

Skills

Security architecture

Application security

Cryptography

Secure API design

Security tooling

CI/CD security

Compliance frameworks

WebAuthn/FIDO2

Security communication

Tools

SAST

DAST

SCA

CI/CD security tooling

WebAuthn

Job description

Xident B.V. in the United States (remote-first) is seeking a Senior Security Engineer to protect our platform and biometric data. You will architect and enforce security across APIs, ML pipelines, and data in transit and at rest.

You will lead encryption, compliance programs (SOC 2, GDPR, CCPA, BIPA), and implement WebAuthn. The role combines hands-on security with influencing engineering culture in a fast-growing, globally distributed team.