Staff Security Engineer

What this role involves

Collective is hiring a Staff Security Engineer to own end-to-end security of its member platform. The role embeds security into the development lifecycle, leads threat modeling, and handles authentication/authorization architecture. It also involves driving CCPA compliance and integrating security testing into CI/CD pipelines.

Skills this posting asks for

• oauth 2.0
• oidc
• saml
• jwt
• sast
• dast
• semgrep
• snyk
• burp suite
• authentication
• authorization
• session management
• role-based access control
• ci/cd
• ccpa
• gdpr
• data mapping
• threat modeling
• security reviews
• runbooks
• fintech
• ai
• agent-based workflows
• security standards

Requirements

• 8 years of experience
• Level: staff

From the employer’s posting

About Collective: Collective is on a mission to redefine the way businesses-of-one work. Our technology and team of trusted advisors help members achieve financial independence by taking care of everything from business incorporation to accounting, bookkeeping, tax services, and access to a thrivi…