Software Engineer - Privacy & Compliance
Builds backend systems to enforce data privacy, automate compliance, and implement distributed authorization mechanisms. Requires 5+ years experience in backend/infrastructure with languages like Python or Go, plus familiarity with privacy regulations.
About the job
What You’ll Do
- Design, build, and operate backend services that enforce policy-driven data access, lifecycle controls, and privacy protections.
- Develop distributed authorization and identity-aware enforcement mechanisms integrated directly into data services and control planes.
- Implement auditability, policy hooks, and enforcement observability to ensure compliance is continuously verifiable.
- Partner with Security, Legal, and Compliance to convert privacy requirements into scalable technical designs and developer-friendly APIs.
- Harden data platforms and backend services through schema-level controls and data handling constraints by default.
- Collaborate with infrastructure teams to ensure consistent enforcement across systems while minimizing duplicated implementations.
- Contribute patterns, libraries, and education that elevate trustworthy data access patterns across the organization.
You Might Thrive in This Role If You Have
- 5+ years of industry experience building and operating backend or infrastructure systems in production.
- Strong software engineering fundamentals, with fluency in at least one major programming language (Python, Go, Rust, C++, Java).
- Experience with distributed authorization, RBAC/ACL systems, encryption-based access, or policy engines.
- Familiarity with global privacy regulations and their architectural implications.
- Ability to influence and collaborate with teams across legal, compliance, product, and engineering.
- A bias toward practical, impactful solutions that balance privacy protections with product needs.
Nice to Have
- Experience with cloud platforms (Azure, AWS, GCP) and large-scale data systems.
- Background in security engineering, privacy engineering, or data governance.
- Experience with control-plane or metadata-driven enforcement systems.
- Exposure to data platforms or ML infrastructure.
- Prior experience in a regulated or highly sensitive data environment.
Skills
Python, Go, Rust, C++, Java, RBAC, Acl, Distributed Authorization, Policy Engines, AWS, Azure, GCP, Encryption, Auditability, ML Infrastructure
Similar jobs
Security Engineering jobs
Fluidstack
New York, NYThe Security Engineer will track advanced adversaries targeting frontier AI infrastructure, build intelligence pipelines, conduct threat hunts, and create production detections. The role requires hands-on malware and infrastructure analysis, production programming, and close collaboration with detection and incident response teams.
Tailscale
United StatesThis role builds and improves infrastructure security controls across cloud, operating system, Kubernetes, network, and CI/CD environments. It requires cloud security expertise, programming and Infrastructure as Code proficiency, threat-modeling experience, and the ability to lead infrastructure containment during security incidents.
OpenAI
San Francisco, CAThe Red Team Specialist evaluates AI models for cyber capabilities, safeguard failures, and agentic-system abuse risks. The role combines hands-on security testing, automated evaluation infrastructure, risk assessment, and cross-functional communication.
Vercel
San Francisco, CABuild and operate trust and safety systems that detect and mitigate abuse at internet scale. The role combines security engineering, large-scale data analysis, and applied LLM techniques, requiring 5+ years of relevant experience and strong Python and JavaScript/TypeScript skills.
1Password
United StatesLeads and develops a security incident response team while driving automation, AI-assisted workflows, operational maturity, and response strategy. The role requires 5+ years of incident response experience, people leadership, technical depth, and calm management of high-severity incidents.