Senior Staff Engineer - Product Security

Faire • San Francisco, CA

3h • Hybrid

About The Position

Faire is an online wholesale marketplace built on the belief that the future is local — independent retailers around the globe are doing more revenue than Walmart and Amazon combined, but individually, they are small compared to these massive entities. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe. Picture your favorite boutique in town — we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so that small businesses everywhere can compete with these big box and e-commerce giants.
By supporting the growth of independent businesses, Faire is driving positive economic impact in local communities, globally. We’re looking for smart, resourceful and passionate people to join us as we power the shop local movement. If you believe in community, come join ours.
Our Engineering organization owns the software that makes our marketplace work. Our Product Security team enables product engineering teams to develop and deploy secure software that makes that happen. We care about good engineering practice and love to write software that is secure, tested, easy to maintain, and can scale to millions of users. We build scalable, reusable frameworks; consult with product teams; listen to the data; and iterate.
As a Senior Staff Software Engineer, Product Security, you will be the technical lead for the Product Security domain. You’ll set the long-term technical direction for how security is designed, built, and automated across Faire’s application stack. You will partner closely with Platform and Product Engineering teams to identify and mitigate security risks, lead major security initiatives, and mentor engineers across the company to raise the bar on secure engineering practices.
You will also drive cross-functional programs to ensure security is deeply integrated into our architecture, pipelines, and developer experience — reducing risk while maintaining velocity.

Requirements

• Deep expertise in software security architecture and engineering, with a proven ability to design and scale security frameworks across a large, distributed system.
• Strong programming skills and experience in multiple languages (e.g., Kotlin, Python, TypeScript, Java, or Go), with the ability to influence engineering design through code and review.
• A track record of technical leadership — driving company-wide or cross-organizational initiatives that improved security posture, developer experience, or system resilience.
• Experience building and deploying security automation at scale, including CI/CD integrations, vulnerability management pipelines, and automated testing or remediation frameworks.
• Hands-on experience with cloud environments and modern infrastructure (AWS, OCI, GCP), including Kubernetes, Terraform, and container security.
• A deep understanding of application security principles and practices, including authentication, authorization, data protection, and common web application vulnerabilities (OWASP Top 10).
• A strategic mindset — you can balance risk reduction with engineering velocity and developer enablement.
• Excellent communication and collaboration skills, with the ability to influence senior leaders and guide engineering teams across multiple domains.
• A passion for mentoring others and cultivating a security-first engineering culture through partnership, guidance, and empathy.

Responsibilities

• Set the long-term technical direction for application security at Faire, establishing scalable, developer-friendly frameworks and principles that enable secure development across all product areas. This role also provides the candidate the opportunity to expand technical leadership scope to infrastructure security.
• Lead the design and implementation of high-impact, reusable frameworks for security use cases such as authentication, authorization, secrets management, and data protection.
• Architect and automate security controls within our development and deployment pipelines — enabling proactive prevention, detection, and remediation of vulnerabilities at scale.
• Partner with senior engineering and platform leaders to influence system design, threat models, and architecture decisions that strengthen Faire’s overall security posture.
• Drive strategic cross-functional initiatives, collaborating with Platform, Infrastructure, Risk, and Compliance teams to integrate security deeply into our technical and operational foundations.
• Mentor and guide engineers across the organization, raising the bar for secure software design, technical rigor, and security-first thinking.
• Lead complex investigations and incident response efforts, ensuring rapid, effective remediation and continuous improvement of our security systems.
• Stay ahead of emerging threats and technologies, incorporating modern security practices and automation into Faire’s engineering ecosystem.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed