{"id":2792819,"url":"https://alion.io/job/sandbar-seniorstaff-security-engineer","title":"Senior/Staff Security Engineer","company":{"id":456105,"name":"Sandbar","domain":"sandbar.com","url":"https://alion.io/company/sandbar-3","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"D","score":45,"open_postings":13,"ghost_share":0.923,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":190000,"max":270000,"currency":"USD","period":"year","gross":null,"usd_annual":270000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-10-17T19:58:26Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-18T13:03:02Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"About Sandbar\nSandbar is an interface company in New York City. We aim to augment individuals so we can each think, act, and move more freely. Our team has built SW, ML, and HW products across Meta, CTRL-labs, Google, Apple, Fitbit, Peloton, and Equinox.\nOur first product, Stream, is a self extension-a private voice ring and conversational interface. Stream has been featured in WSJ, Bloomberg, & Wired, and begins shipping in Summer '26.\nJoin us in creating technology that extends human thinking.\nAbout\nWe’re looking for a senior or staff backend engineer with deep security expertise to help build Stream, a new conversational interface. Stream is a self extension that people use to expand their own thinking. We believe thoughts belong only to you and must be private.\nYou’ll own the backend systems that make that privacy real: how user data is encrypted, how keys are managed, how services and people authenticate to our infrastructure, and how we detect and respond to problems. You’ll define security at Sandbar, working inside a small backend team on a live production service rather than in a separate security function.\nResponsibilities\nDesign and ship end-to-end encryption for user data, including key management and keeping search and background processing working on encrypted data\n\nBuild confidential-computing infrastructure so sensitive processing is isolated and verifiable, including attestation and reproducible builds\n\nOwn identity and secrets across the stack: short-lived workload credentials, least-privilege service identities, environment isolation, and auditable privileged access\n\nOwn supply chain and CI/CD security\n\nBuild the detection and response loop: audit logging, alerting, runbooks, and post-incident reviews that end in engineering changes rather than documents\n\nDrive vendor and data-handling security: AI provider data agreements, third-party integration and OAuth scope review, and data retention and deletion\n\nLead compliance work (e.g. SOC 2) from the engineering side, with controls enforced by systems and evidence produced automatically\n\nCarry a share of the core backend: build product features on the real-time Python services you secure, and review the team’s changes with a security eye\n\nSet direction on secure engineering practice through design reviews, threat models, and clear, minimal guidance that engineers actually follow\n\nQualifications\n7+ years building and operating backend systems, with meaningful time as the engineer accountable for security on a production service\n\nStrong Python and comfort owning a live, real-time service end to end\n\nHands-on applied cryptography: envelope encryption, authenticated encryption, key hierarchies, and the practical mistakes that break otherwise-correct designs\n\nDeep cloud security experience on AWS and/or GCP: IAM, workload identity federation, KMS, secrets management, audit logging\n\nExperience leading incident response on a production service, from containment through follow-up hardening\n\nExperience with confidential computing or attestation (e.g. Nitro Enclaves, SEV-SNP, TDX, App Attest) strongly preferred\n\nComfortable with document stores and their access-control models\n\nAble to make tradeoffs explicitly and ship: you know the difference between a control that gates a launch and one that can follow\n\nCommunicate precisely with engineers, founders, auditors, and vendors\n\nNice to have\niOS security primitives (Secure Enclave, Keychain)\n\nBluetooth LE device security, firmware signing, or secure pairing\n\nExperience with retrieval systems or LLM infrastructure and their data-flow controls\n\nSOC 2 or ISO 27001 audit experience from the engineering side\n\nFTE Benefits\nHealth, vision, and dental benefits\n\nCompany-sponsored 401(k)\n\nUnlimited PTO and sick time\n\nEarly stage equity","description_format":"text","description_chars":3795,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Speech & Audio AI","Smartwatches & Fitness Trackers"],"lifecycle":[{"event":"open","at":"2026-10-17T20:43:58Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:1","win:early"],"computed_at":"2026-10-18T14:19:08Z"},"pay":{"stated_usd_annual":270000,"is_top_pay":true},"html_url":"https://alion.io/job/sandbar-seniorstaff-security-engineer","json_url":"https://alion.io/job/sandbar-seniorstaff-security-engineer.json","meta":{"generated_at":"2026-10-18T14:19:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21030,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":456105},"rest":"https://alion.io/mcp/rest/get_company?id=456105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsandbar-seniorstaff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsandbar-seniorstaff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsandbar-seniorstaff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sandbar-seniorstaff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsandbar-seniorstaff-security-engineer"}]}