Staff Privacy Engineer

Tools for Humanity•San Francisco, CA

8d•$276,000 - $325,000•Remote

About The Position

This is a unique strategic opportunity to bridge the gap between technology and law, bringing technical expertise that ensures compliance in data protection, governance, and lifecycle management. This role will be pivotal in crafting and effectively communicating messaging on the Company’s privacy and security framework and ensuring that audiences of all levels (including Regulators) understand and support the Company’s mission. You will be a founding member of our dedicated Privacy Engineering team.

Requirements

5+ years of experience in privacy engineering or architecture.
A strong foundation in systems engineering
Fluency in a variety of languages and stacks - able to dig into a codebase and determine how it actually works in practice
Strong conceptual understanding of classical and modern cryptographic functions including symmetric and public key cryptography, hash algorithms, and zero knowledge proofs.
Have led or been a significant contributor to privacy and security projects, demonstrating a cross-functional collaboration skill set.
Motivated by the opportunity to contribute your expertise to a project with a broad and positive mission.
Strong critical thinking and leadership abilities, with a proven track record of driving initiatives forward effectively.
Proven verbal and written communication skills and an ability to effectively present the Company’s position before stakeholders (including Data Protection Authorities).
Experience working with global privacy and data protection frameworks (including GDPR, CCPA/CPRA), and engaging with regulators or supporting regulatory processes.

Responsibilities

Acting as a technical advisor to legal and product teams, aligning business goals with privacy requirements.
Serve as a trusted internal advisor, ensuring that product updates, technical implementations, and privacy representations remain aligned, both technically and legally, across the organization.
Partner with Product and Privacy to drive regulatory engagement. Prepare and deliver technical briefings, demonstrations, and written materials that reflect privacy and data protection standards. If needed, act as technical subject matter expert in regulatory meetings, ensuring that regulators receive accurate, transparent, and technically grounded explanations of how our systems uphold privacy-by-design principles.
Partner directly with product teams to design, implement, and validate privacy-by-design features within the World App, Orb, and related systems, ensuring that anonymization, encryption, data minimization and user-control mechanisms are embedded at the architectural level.
Define and maintain canonical data flow maps and data inventories across all systems, and develop solutions for data mapping, governance, classification, and protection.
Conduct threat modeling, privacy design reviews, and code-level assessments to ensure the highest privacy and security standards.
Analyze, design and suggest product and protocol enhancements to help mitigate privacy vulnerabilities and prevent potential future privacy and security risks.
Collaborate with privacy attorneys to ensure that our privacy notices, consents, policies, and regulatory submissions accurately describe how our technology functions in practice, including leading or supporting DPIAs and translating regulatory requirements into technical implementations.
Work with Comms/Marketing to develop and maintain visual demonstratives, diagrams, videos, and animations that show, in regulator-friendly and user-friendly terms, the Company’s privacy architecture.
Establish and enforce privacy engineering standards, patterns, and review processes