Collective
Senior/Staff Security Engineer
$195K–$260K
San Francisco · Hybrid · Staff · Full-time · Posted Jun 4, 2026
- Experience
- 8+ years of software engineering experience, including significant time building or owning relevant systems in production.
About the job
Build and ship the authentication, authorization, and data-protection systems for Collective’s member platform, including safe access patterns for AI agents and third parties.
What you'll do
- Own and implement authentication and authorization architecture, including session management, MFA, access enforcement, and machine-to-machine authentication.
- Build delegated access patterns for AI agents and third parties, and implement encryption and controls to protect sensitive member data.
- Lead RFCs and design reviews, threat-model owned systems, and remediate findings in the engineer’s domain.
What they ask for
- 8+ years of software engineering experience, including significant production experience building or owning authentication, identity, authorization, or data-protection systems.
- Strong backend engineering skills and experience shipping production code in a modern web stack.
- Working knowledge of OAuth 2.0, OIDC, SAML, JWT, session management, and applied cryptography, including envelope encryption, KMS-based key management, and key rotation.
- Ability to threat-model systems and influence platform direction as a senior individual contributor through RFCs, design reviews, and working code.
Pay
$195K – $260K (base salary)
Tools
Python/Django, AWS, OAuth 2.0, OIDC, SAML, JWT, KMS
AI focus
Build authentication and authorization patterns that let AI agents act on a member’s behalf with scoped, time-boxed, revocable authority, with actions attributed and audited.
Model-written summary · the original posting is authoritative