Offer summary

Qualifications:

Minimum 8 years of experience in security systems in production environments., Strong understanding of web security best practices and vulnerabilities., Ability to communicate complex security concepts to diverse audiences., Experience with security in startups, blockchain, or incident response is a plus..

Key responsibilities:

Architect and integrate security into Privy's products.

Develop and enforce internal security best practices.

Collaborate with customers to build secure infrastructure.

Identify, triage, and remediate security issues in the codebase.

Job description

Who we are

About Privy

Our mission is to make privacy and user ownership the default online. We build simple, flexible developer tooling that make it easy to build products that put users first. By leveraging modern cryptography, we shift the status quo around digital ownership and protect the accounts and assets of millions of users.

Engineering at Privy is not just about writing world-class code. We create software that turns complex technical systems into delightful developer tools. We assemble tried-and-true primitives into intuitive, responsive APIs and beautiful interfaces. We believe in open-source work and transparency with our teammates and users. We encourage each other to think big, run experiments and follow our curiosity so we can build better tooling that lets developers shine and empower their users.

Learn more about Privy: Privy and Stripe: Bringing crypto to everyone

What you’ll do

Privy is seeking a staff application security engineer to work at the intersection of critically important authentication and data security surfaces and deep challenges of digital ownership and trusted execution environments. You'll architect security as a core part of our product, own and build out internal best practices, work directly with customers to build secure infrastructure for millions, and triage and remediate issues within the codebase.

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

8+ years experience with implementing or maintaining security systems in production environments
Comfortable making changes to production environments
Understanding of modern web security best practices and common vulnerabilities
Ability to communicate complex security concepts clearly to both technical and non-technical audiences
A collaborative approach to security that emphasizes education and enablement

Preferred qualifications

Experience with corporate security or information security in startups
Blockchain security experience
Detection and response or incident response background
AWS security expertise
Bug bounty hunting or red team experience
Experience building security-focused developer tools
Published about your work in security (presentations, blog posts, open source contributions)

Required profile