Senior/Staff Security Engineer

About the role

Collective is looking for a Senior/Staff Product Security Engineer to own and evolve the authentication, authorization, and data‑protection systems that secure its member platform. This is a hands‑on software engineering role where you will design, implement, and ship production code that safeguards user identities and sensitive data.

Key responsibilities

• Own end‑to‑end authentication and authorization architecture, including session management, MFA, and machine‑to‑machine auth.
• Design and implement application‑layer encryption, key management, and rotation for member documents and data.
• Extend security patterns to delegated and agent‑based access, ensuring scoped, revocable authority for AI agents and third parties.
• Lead design processes: write RFCs, run design reviews, and guide product engineers through security‑critical changes.
• Threat‑model identity and data‑protection systems and remediate findings within your domain.

Required profile

• 8+ years of software engineering experience, with significant work on authentication, identity, authorization, or data‑protection systems in production.
• Strong backend skills, comfortable shipping production code in a modern web stack (Python/Django on AWS).
• Deep knowledge of authentication standards (OAuth 2.0, OIDC, SAML, JWT) and their failure modes.
• Practical applied‑cryptography literacy (envelope encryption, KMS‑based key management, key rotation).
• Ability to conduct threat‑modeling sessions and influence platform direction as a senior individual contributor.

Required skills

• Python
• Django
• AWS
• OAuth 2.0
• OIDC
• SAML
• JWT
• Encryption
• KMS

What we offer

• Hybrid work model with in‑office and remote flexibility.
• Fresh lunch on office days and $150 monthly commuter reimbursement.
• Health & wellness reimbursements, flexible PTO, 14 holidays.
• Comprehensive medical, dental, vision coverage and 401k with equity.
• Parental leave, quarterly virtual events, and an annual in‑person summit.