Senior Security Engineer — Platform Auth & Compliance

Collective Hub Inc.; San Francisco (CA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid Work Model

Fresh Lunch

Commuter Support

Health & Wellness reimbursement

Flexible PTO

Comprehensive Coverage

Parental Leave

401k plan

Quarterly virtual events

Job summary

Collective Hub Inc. is seeking a Staff Security Engineer to take charge of security for its member platform. This senior role involves overseeing authentication, driving compliance with regulations, and integrating security into development cycles while collaborating with various teams.

The ideal candidate will have 8+ years of experience in security engineering, expertise in authentication systems, and the ability to influence platform direction effectively. A hybrid work model is offered, along with comprehensive benefits including health coverage and equity options.

Qualifications

• 8+ years of security engineering experience, focusing on application security.
• Strong expertise in OAuth 2.0, OIDC, SAML, JWT systems.
• Hands-on SAST/DAST experience integrated into CI/CD pipelines.
• Knowledge of CCPA and GDPR compliance for SaaS platforms.
• Experience in translating regulatory requirements to engineering controls.
• Ability to work as a senior individual contributor influencing decisions.

Responsibilities

• Own the authentication and authorization architecture across the platform.
• Drive CCPA compliance with a focus on data flows and access controls.
• Design and maintain security testing frameworks in CI/CD pipelines.
• Lead threat modeling with product engineers during design processes.
• Define security standards, policies, and maintain security guardrails.
• Lead post-incident security reviews and root-cause analysis.
• Evaluate and integrate third-party security tools.

Skills

Security engineering experience

Authentication and authorization systems expertise

SAST/DAST programs experience

CCPA and GDPR compliance knowledge

Collaboration with Legal and Privacy teams

Product empathy

Tools

Semgrep

Snyk

Burp Suite

Job description

Collective Hub Inc. is seeking a Staff Security Engineer to take charge of security for its member platform. This senior role involves overseeing authentication, driving compliance with regulations, and integrating security into development cycles while collaborating with various teams.

The ideal candidate will have 8+ years of experience in security engineering, expertise in authentication systems, and the ability to influence platform direction effectively. A hybrid work model is offered, along with comprehensive benefits including health coverage and equity options.