Senior Developer (Windows), Product Security
Senior Developer builds Windows security features using Rust and other languages, develops secure libraries, resolves vulnerabilities, and leads secure coding practices. Requires 4+ years experience in Windows security development and cryptography.
About the job
Responsibilities
- Work within a small team of developers specializing in Rust, Go, Swift, and Security Development
- Implement new security features for 1Password and develop secure libraries for shared security-critical code
- Assist in security design efforts, scoping, estimating, and planning work for new features
- Demonstrate leadership in security development and serve as a trusted point of contact
- Code, test, debug, deliver, and maintain production software systems
- Collaborate with Design, QA, and security engineering teams
- Communicate technical requirements to stakeholders and solve problems scalably
- Mentor junior team members through guidance, knowledge sharing, and pair programming
- Review code to maintain high quality and foster feedback environment
- Stay informed on security development trends and best practices
Requirements
- 4+ years of software development experience with a security focus, including modern encryption techniques, libraries, or authentication protocols
- 4+ years hands-on Windows security development with Rust, C#, C/C++, Go, or TypeScript
- Experience with Rust development and FFI interfaces for Windows; knowledge of Windows OS architecture and optimizations
- Familiarity with TPM, HSM, Windows Hello, BitLocker, Secure Boot, and Credential Guard
- Strong understanding of security domains (cryptography, network security, application security, threat vectors, access control)
- Excellent communication skills for nuanced security topics
- Self-starter with strong organizational skills for solving complex problems
- Knowledge of Agentic AI Model capabilities and workflows
Nice-to-Haves
- Experience with SAML, OAuth, OpenID Connect
- SaaS product development experience
- Leadership experience in software development teams
- GitHub/GitLab and CI/CD pipelines
- System analysis tools (DataDog, SemGrep, Sonarqube, Fortify)
Compensation
USA: $153,000 - $214,000 USD base salary, plus benefits, PTO, equity, incentives. Canada: $144,000 - $202,000 CAD.
Skills
Rust, C#, C/C++, Go, TypeScript, Windows Security, Tpm, Hsm, Bitlocker, Windows Hello, Ffi, Cryptography, Secure Boot, Credential Guard
Similar jobs
Security Engineering jobs
United States
Provides technical leadership for Security Operations by building cloud security platforms, automated controls, vulnerability-management workflows, and developer-facing security capabilities. Requires senior-level production systems experience, AWS security architecture, Terraform, and strong cross-functional technical ownership.
Juicebox
San Francisco, CA
Build and own Juicebox’s governance, risk, compliance, and customer trust function, leading audits, enterprise security reviews, policies, and AI governance initiatives. Requires 3+ years in GRC or security compliance and experience with SOC 2, ISO 27001, and customer security questionnaires.
Alex
San Francisco, CA
Own Alex’s information security, compliance, AI governance, and enterprise trust program as its first dedicated Security & Trust hire. The role combines security reviews and customer-facing assurance with audits, regulatory readiness, risk management, and technical control development.
Plaid
New York, NY
Leads a high-leverage fraud intelligence team while personally investigating complex attacks across identities, devices, accounts, and payments. The role combines people leadership, incident response, threat intelligence, and partnerships with product and ML teams to improve fraud detection and prevention.
Twilio
United States
Lead technical response to security incidents across Twilio's global cloud infrastructure, including triage, containment, remediation, documentation, and post-incident improvements. Requires 5+ years incident response experience, expertise with SIEM/SOAR, cloud platforms, and AI-driven security tools.