Senior/Staff Security Engineer

The role

You will own the backend systems that ensure user data privacy for Stream, a conversational interface. You will design end-to-end encryption, build confidential-computing infrastructure, and manage identity and secrets across the stack.

What you will do

• Design and ship end-to-end encryption for user data
• Build confidential-computing infrastructure
• Own identity and secrets across the stack
• Own supply chain and CI/CD security
• Build the detection and response loop
• Drive vendor and data-handling security
• Lead compliance work from the engineering side
• Carry a share of the core backend
• Set direction on secure engineering practice

Required qualifications

• 7+ years building and operating backend systems
• Meaningful time as the engineer accountable for security on a production service
• Strong Python and comfort owning a live, real-time service end to end
• Hands-on applied cryptography
• Deep cloud security experience on AWS and/or GCP
• Experience leading incident response on a production service
• Comfortable with document stores and their access-control models
• Able to make tradeoffs explicitly and ship
• Communicate precisely with engineers, founders, auditors, and vendors

Nice to have

• Experience with confidential computing or attestation (e.g. Nitro Enclaves, SEV-SNP, TDX, App Attest)
• iOS security primitives (Secure Enclave, Keychain)
• Bluetooth LE device security, firmware signing, or secure pairing
• Experience with retrieval systems or LLM infrastructure and their data-flow controls
• SOC 2 or ISO 27001 audit experience from the engineering side

Benefits

• Health, vision, and dental benefits
• Company-sponsored 401(k)
• Unlimited PTO and sick time
• Early stage equity

About the company

Sandbar is an interface company in New York City. Their first product is Stream, a private voice ring.