Senior Engineer, Security
About The Position
Grow Therapy is looking for a Senior Security Engineer to own the data security infrastructure, which includes systems for classifying, protecting, and governing sensitive data across the company. The role involves being the hands-on technical owner of the infrastructure that ensures sensitive data is handled with the highest security standards. This position reports into the Head of Security and collaborates closely with Data, Engineering, and the Detection & Response team. The role requires both building and strategizing, including shipping pipelines and services, and defining the future of data security. As part of Grow's Internal Foundations pillar, this role will architect the data-protection foundation for all teams and AI tools.
Requirements
- Hands-on data infrastructure engineering experience, including writing production code, designing data pipelines and services, and conducting system design reviews.
- Experience building security or data infrastructure that real teams depend on.
- Deep experience in the data security stack, including data classification, masking/tokenization, encryption and key management, and secure data access, with the ability to integrate these into a coherent system.
- Ability to set direction, execute on it, define success metrics, prioritize effectively, and inspire partner teams.
- A risk-reduction mindset, focusing on high-leverage controls and making the secure path the default.
- Clear and compelling communication skills, capable of explaining data security tradeoffs and risks to both technical and non-technical audiences, including executives and clinical stakeholders.
Responsibilities
- Define and build the company's data security infrastructure, including a clear vision for its future, identifying biggest risks, defining 'secure by default' for sensitive data, and creating a roadmap.
- Build automated data classification and tagging pipelines to scan production data models, infer sensitivity, and propagate tags through data lineage, ensuring downstream systems can act on classification automatically.
- Develop field-level dynamic masking, tokenization, and redaction driven by classification tags to ensure sensitive data is exposed only when necessary, with access being scoped, justified, and logged.
- Own the security of data connectors and pipelines feeding AI tools, including authentication, authorization, and observability, to ensure safe and appropriate use of AI technologies.
- Design and ship encryption infrastructure for end-to-end protection of sensitive data, including application-layer and field-level encryption, envelope encryption, and key management, engineered for speed and scalability.
Benefits
- Comprehensive Health Coverage: Medical, dental, and vision insurance, plus life and disability coverage.
- Parental Leave & Family Support: Up to 18 weeks paid leave and a new child stipend.
- Financial Wellness: 401(k) program and equity opportunities.
- Meals & Home Office Support: Stipends for home office setup and ongoing funds for meals, with tailored perks for both remote and in-office employees.
- Time Off to Recharge: Flexible PTO, 12 paid holidays, and a full winter break week.
- Wellness & Development: Annual stipends for personal & professional growth.
- Mental & Physical Health Support: No-cost access to therapy through the Grow platform, weekly flexible hours for self-care (“Mental Health Mornings/Afternoons”) and memberships to leading wellness apps (such as One Medical, Headspace, and Talkspace).
- Extra Perks: Pet insurance discounts, commuter benefits, and global travel assistance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
