Senior Security Engineer: Auth & Data Protection

53 Stations; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid Work Model

Fresh Lunch

Commuter Support: $150 monthly

Health & Wellness: $200 quarterly

Time Off: Flexible PTO + 14 holidays

Comprehensive Coverage: 100% medical/d

Parental Leave: 16 weeks fully paid

Retirement & Ownership: 401k + equity

Team Connection: Annual summit

Job summary

Collective is hiring a Senior/Staff Product Security Engineer to build authentication, authorization, and data‑protection systems at the heart of our member platform. This is a software engineering role first: you will design and ship the code that governs how our platform authenticates users and services, what they're authorized to do, and how our members' data is protected.

Based in San Francisco with a hybrid work model, you will own end-to-end identity, drive patterns for AI agents, and lead

Qualifications

• 8+ years of software engineering experience in production auth/identity/data-protection systems.
• Backend experience with Python/Django on AWS.
• Deep knowledge of OAuth2.0, OIDC, SAML, JWT.
• Envelope encryption, KMS-based key management, key rotation.
• Ability to conduct RFCs and design reviews with engineers.

Responsibilities

• Own end-to-end authentication and authorization architecture for the member platform.
• Extend patterns to delegated and agent-based access for AI agents and third parties.
• Design and implement application-layer encryption and data protection controls.
• Lead RFCs, design reviews, and security-focused changes with product engineers.
• Threat-model identity/data-protection systems and remediate findings.
• Ground encryption decisions in applicable regulatory requirements.

Skills

Authentication systems

Backend engineering

OAuth/OIDC/SAML/JWT

Applied cryptography

Threat modeling

RFCs & design reviews

Security-minded product mindset

Tools

Python/Django

AWS

Job description

Collective is hiring a Senior/Staff Product Security Engineer to build authentication, authorization, and data‑protection systems at the heart of our member platform. This is a software engineering role first: you will design and ship the code that governs how our platform authenticates users and services, what they're authorized to do, and how our members' data is protected.

Based in San Francisco with a hybrid work model, you will own end-to-end identity, drive patterns for AI agents, and lead