# Staff Security Engineer

**Company:** [Collective Intelligence Project](https://hotfix.jobs/companies/collective-intelligence-project)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $200k – $260k/yr
**Experience:** 8+ years
**Skills:** Oauth 2.0, OIDC, SAML, Jwt, SAST, DAST, Semgrep, Snyk, Burp Suite, CCPA, GDPR
**Posted:** 2026-06-04

> Own end-to-end security for a fintech platform: authentication/authorization architecture, SAST/DAST in CI/CD, threat modeling, and CCPA compliance. Senior IC role requiring 8+ years in application security.

## Job Description

## What you'll do
- Own the end-to-end authentication and authorization architecture across Collective's member platform, including session management, role-based access control, and the emerging patterns needed to secure agent-based workflows and service-to-service communication.
- Drive CCPA compliance across the platform, partnering with Legal and Engineering to map data flows, implement required access and deletion controls, and establish ongoing audit and reporting mechanisms.
- Design and maintain Collective's static and dynamic application security testing (SAST/DAST) frameworks, integrating them into CI/CD pipelines so security feedback is fast, automated, and actionable for product teams.
- Lead threat modeling for new features and platform changes, collaborating with product engineers early in the design process to identify and address risk before it reaches production.
- Define and maintain security standards, policies, and runbooks that give engineering teams clear guardrails without slowing down delivery.
- Respond to and lead post-incident security reviews, driving root-cause analysis and translating findings into durable platform improvements.
- Evaluate and integrate third-party security tooling, staying current on the threat landscape relevant to fintech platforms handling sensitive financial and tax data.

## What you'll bring
- 8+ years of security engineering experience, with depth in application security and a track record of improving security posture on production platforms at scale.
- Strong expertise in authentication and authorization systems (OAuth 2.0, OIDC, SAML, JWT) and the nuances of securing both user-facing sessions and machine-to-machine flows, including AI agent authentication patterns.
- Hands-on experience building or owning SAST/DAST programs and embedding security testing into CI/CD pipelines; familiarity with tools like Semgrep, Snyk, Burp Suite, or equivalent.
- Working knowledge of CCPA (and ideally GDPR) compliance requirements as they apply to a SaaS platform handling personal financial data, including data mapping, subject rights workflows, and audit trails.
- Experience collaborating with Legal and Privacy teams to translate regulatory requirements into concrete engineering controls, not just documentation.
- Comfort operating as a senior individual contributor who influences platform direction without requiring a management chain to get things done — you write RFCs, lead design reviews, and bring engineers along through conviction and clarity.
- Product empathy: the ability to hold security rigor and member experience in the same frame, and to make the right tradeoffs with both in mind.
- Familiarity with AI-assisted development workflows and an interest in the security implications of agent-based systems is a strong plus.

## Similar roles

- [Senior Staff Security Engineer, Vulnerability Management](https://hotfix.jobs/jobs/48bab836-a257-4a63-898d-d884ea8db229) - Zocdoc - Remote - $200k – $290k/yr
- [Staff Engineer, User Trust](https://hotfix.jobs/jobs/5ccd71c7-2192-4307-8c68-140cd612dcef) - Betterment - New York, NY - $200k – $238k/yr
- [Data Center Physical Security Systems Engineer](https://hotfix.jobs/jobs/af0435f9-6a5c-4c1c-9d04-fe0dc2b55c8a) - OpenAI - Remote - $205k – $335k/yr
- [Staff Engineer, Cloud Security](https://hotfix.jobs/jobs/99669566-c101-41a5-be5e-7cf047fbf291) - Illumio - Sunnyvale, CA - $194k – $233k/yr
- [Staff Engineer, Container Security](https://hotfix.jobs/jobs/22d8c1cd-947c-4f33-baf9-0806f0b90251) - Illumio - Sunnyvale, CA - $194k – $233k/yr

**Apply:** https://hotfix.jobs/jobs/e9f611f1-dee2-4b02-9c10-d55aacab5500
**Canonical:** https://hotfix.jobs/jobs/e9f611f1-dee2-4b02-9c10-d55aacab5500