Senior Privacy Engineer

About the role

The Legal team at Asana works collaboratively across functions to foster effortless teamwork for everyone. This role reports to Asana’s Head of Global Privacy, Data Protection, and Compliance.

Responsibilities

• Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure.
• Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity.
• Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs.
• Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identification frameworks.
• Conduct privacy impact assessments and threat modeling for high-risk data processing activities.
• Advocate for privacy-preserving solutions, serve as a trusted technical advisor across the business, and identify new opportunities to improve our overall privacy posture.
• Possibly partner cross-functionally to ensure our privacy policies and notices accurately reflect our underlying technology.
• Develop customer-facing trust documentation on privacy and support privacy incident response efforts.
• Design and implement privacy-preserving analytics and measurement systems that provide actionable insights while protecting individual user privacy.

Requirements

• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.
• 6+ years of software engineering experience, with 3+ years focused on privacy or data protection.
• Passion for privacy and data protection with a deep understanding of GDPR, CCPA, and emerging global privacy frameworks.
• Proven experience building technical controls for data governance, including classification, lineage, retention, and deletion at scale.
• Familiarity with privacy risks in ML systems, such as training data sourcing, model memorization, and inference privacy.
• Strong foundation in privacy-by-design principles and hands-on experience applying them throughout product development.
• Demonstrated ability to translate complex regulatory and legal requirements into clear engineering specifications.
• Experience with cryptographic techniques, anonymization, and de-identification frameworks.
• Strong communication and collaboration skills, with a track record of partnering effectively with legal, policy, and non-technical stakeholders.

Qualifications

• Demonstrated ability to translate complex regulatory and legal requirements into clear engineering specifications.
• Experience with cryptographic techniques, anonymization, and de-identification frameworks.
• Strong communication and collaboration skills, with a track record of partnering effectively with legal, policy, and non-technical stakeholders.

Skills

• Curiosity about AI tools and emerging technologies.
• Software engineering experience, with 3+ years focused on privacy or data protection.
• Data governance experience, including classification, lineage, retention, and deletion at scale.
• Privacy risks in ML systems, such as training data sourcing, model memorization, and inference privacy.
• Privacy-by-design principles and hands-on experience applying them throughout product development.
• Translation of complex regulatory and legal requirements into clear engineering specifications.
• Experience with cryptographic techniques, anonymization, and de-identification frameworks.
• Communication and collaboration skills, with a track record of partnering effectively with legal, policy, and non-technical stakeholders.

Benefits

• Mental health, wellness & fitness benefits
• Career coaching & support
• Inclusive family building benefits
• Long-term savings or retirement plans
• In-office culinary options to cater to your dietary preferences

Pay

The estimated base salary range for this role varies based on your location within the United States. For more information about which locations fall into each pay zone, please visit https://asana.com/usa-pay-zones.

Schedule

This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid schedule. If based in-office: The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner.