Sandbar
Senior/Staff Security Engineer
$190K–$260K
New York City · On-site · Staff · Full-time · Posted Oct 17, 2026
- Experience
- 7+ years building and operating backend systems, including meaningful time accountable for security on a production service.
About the job
Own and build backend security for Stream, including privacy protections, security operations, and backend product features.
What you'll do
- Design end-to-end encryption and key management, and build confidential-computing infrastructure.
- Own identity, secrets, supply chain and CI/CD security, and incident detection and response.
- Lead security practices and compliance engineering while contributing to core backend services.
What they ask for
- Strong Python and ability to own a live, real-time service end to end.
- Hands-on applied cryptography, including envelope encryption, authenticated encryption, and key hierarchies.
- Deep cloud security experience on AWS and/or GCP, including IAM, workload identity federation, KMS, secrets management, and audit logging.
- Experience leading production incident response from containment through follow-up hardening.
Nice to have
- Experience with confidential computing or attestation.
- iOS security primitives, Bluetooth LE device security, firmware signing, secure pairing, retrieval systems or LLM infrastructure, or SOC 2/ISO 27001 audit experience.
Pay
$190K – $260K (base salary)
Tools
Python, AWS, GCP, KMS, Nitro Enclaves, SEV-SNP, TDX, App Attest
AI focus
Review AI provider data agreements and third-party data handling; retrieval systems or LLM infrastructure experience is a nice-to-have.
Model-written summary · the original posting is authoritative