Senior Security Engineer, Data Infrastructure

Senior Security Engineer

We're seeking a Senior Security Engineer to lead the data security infrastructure at Grow Therapy. This role involves defining and implementing security policies, building automated classification and tagging pipelines, and ensuring secure data access.

• Define Data Security: Develop a clear vision for data security infrastructure, focusing on risk mitigation, data classification, and secure data access.
• Data Classification: Create automated pipelines to classify and tag sensitive data, ensuring alignment with the Data Classification Policy and automatic propagation of these tags through data lineage.
• Data Masking/Tokenization: Implement field-level dynamic masking, tokenization, and redaction based on classification tags, restricting access to sensitive data only when necessary and logging all access.
• Data Security for AI Tools: Secure data connectors and pipelines for AI tools, ensuring authentication, authorization, and observability, and making secure data access the default.
• Encryption: Design and ship encryption infrastructure for end-to-end protection of sensitive data, including application-layer and field-level encryption, envelope encryption, and key management.

Requirements

• Hands-on data infrastructure engineering experience
• Experience in data classification, masking/tokenization, encryption, and key management
• Comfortable with production code, data pipelines, and system design reviews
• Ability to set direction and execute on it
• Focus on risk reduction and high-leverage controls
• Clear and compelling communication skills

Benefits

• Comprehensive health coverage
• Parental leave and family support
• Financial wellness programs
• Flexible PTO and holidays
• Annual stipends for personal and professional development
• Mental and physical health support
• Additional perks such as pet insurance discounts and global travel assistance

Employment Type

This role is available as a Full-Time, Exempt position, either Hybrid (on-site 3 days per week) or Fully Remote. The base compensation ranges from $152,000 to $208,000 annually for the Fully Remote option and $182,000 to $250,000 annually for the Hybrid option. Both arrangements include travel 2-3 times per year.