Collective

1 month ago

Senior/Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Senior security engineer responsible for end-to-end authentication/authorization, threat modeling, and compliance across the member platform. Embed security into the development lifecycle and collaborate with Engineering, Product, and Legal to protect financial and tax data, including AI-assisted workflows.

Location: San Francisco

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own end-to-end authentication and authorization architecture across the platform, including session management, RBAC, and patterns for secure agent-based workflows and service-to-service communication
•Drive CCPA compliance across the platform by mapping data flows, implementing access/deletion controls, and establishing ongoing audit/reporting mechanisms
•Design and maintain SAST/DAST frameworks and integrate them into CI/CD pipelines for fast, automated security feedback
•Lead threat modeling for new features and platform changes with product engineers to identify and mitigate risk early
•Define and maintain security standards, policies, and runbooks that guide engineering without slowing delivery

Pay and Benefits

Salary: USD 200,000 - 260,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVision401kEquityRemote WorkPaid Leave

Key Requirements

•8+ years of security engineering experience focused on application security and production-scale security improvements
•Strong expertise in authentication and authorization systems (OAuth 2.0, OIDC, SAML, JWT) and secure sessions/machine-to-machine flows
•Hands-on experience building or owning SAST/DAST programs and CI/CD integration
•Working knowledge of CCPA and ideally GDPR compliance for SaaS platforms handling personal financial data
•Experience collaborating with Legal/Privacy teams to translate regulatory requirements into engineering controls

Experience:8+ yearsFintechSaaS

Skills:CommunicationLeadershipCollaboration

Languages:English

Tech Stack:OAuth 2.0OIDCSAMLJWTSemgrepSnykBurp SuiteCI/CDSASTDAST

Company Brief

Collective

Provides an all-in-one online back-office platform for solopreneurs, offering company formation, payroll, bookkeeping, tax services, and financial advisory via AI-assisted tools and a concierge team.

Industry: SaaS

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2020

Glassdoor: 4.2

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Collective

1 month ago

Senior/Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: San Francisco

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Own end-to-end authentication and authorization architecture across the platform, including session management, RBAC, and patterns for secure agent-based workflows and service-to-service communication
•Drive CCPA compliance across the platform by mapping data flows, implementing access/deletion controls, and establishing ongoing audit/reporting mechanisms
•Design and maintain SAST/DAST frameworks and integrate them into CI/CD pipelines for fast, automated security feedback
•Lead threat modeling for new features and platform changes with product engineers to identify and mitigate risk early
•Define and maintain security standards, policies, and runbooks that guide engineering without slowing delivery

Pay and Benefits

Salary: USD 200,000 - 260,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVision401kEquityRemote WorkPaid Leave

Key Requirements

•8+ years of security engineering experience focused on application security and production-scale security improvements
•Strong expertise in authentication and authorization systems (OAuth 2.0, OIDC, SAML, JWT) and secure sessions/machine-to-machine flows
•Hands-on experience building or owning SAST/DAST programs and CI/CD integration
•Working knowledge of CCPA and ideally GDPR compliance for SaaS platforms handling personal financial data
•Experience collaborating with Legal/Privacy teams to translate regulatory requirements into engineering controls

Experience:8+ yearsFintechSaaS

Skills:CommunicationLeadershipCollaboration

Languages:English

Tech Stack:OAuth 2.0OIDCSAMLJWTSemgrepSnykBurp SuiteCI/CDSASTDAST

Company Brief

Collective

Provides an all-in-one online back-office platform for solopreneurs, offering company formation, payroll, bookkeeping, tax services, and financial advisory via AI-assisted tools and a concierge team.

Industry: SaaS

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2020

Glassdoor: 4.2

Website LinkedIn Glassdoor