Whatnot is the largest live stream shopping platform in North America and Europe, enabling users to buy, sell, and discover the things they love. We are redefining e-commerce by blending community, shopping, and entertainment into a unique experience. As a remote-co-located team with hubs in the US, UK, Ireland, Poland, and Germany, we are building the future of online marketplaces together. Our platform features a wide range of collectibles, including fashion, beauty, electronics, trading cards, comic books, and even live plants, with live auctions offering something for everyone. We are just getting started! As one of the fastest-growing marketplaces, we seek bold, forward-thinking problem solvers across all functions. Check out the latest Whatnot updates on our news and engineering blogs, and join us in turning passion into business and bringing people together through commerce. Role Overview: Data Security Engineer The Data Security Engineer is responsible for developing and overseeing technology security systems to protect our systems from cyber threats. This role involves enhancing customer access through seamless access control, advanced authentication, progressive profiling, and consolidated identity management. Develop plans to increase security across systems. Implement protective measures and conduct testing for vulnerabilities. Monitor systems for breaches and investigate anomalies. Design and implement scalable data protection solutions (e.g., encryption, tokenization, DLP, data masking) for structured and unstructured data. Support data classification, labeling, and handling policies in line with regulations such as PCI-DSS, GDPR, and CCPA. Manage DLP systems and lead incident response for data exfiltration or unauthorized access. Integrate data security controls into CI/CD pipelines and DevSecOps frameworks. Perform risk assessments and threat modeling for data flows and systems. Collaborate with Infrastructure, Cloud, and Application Security teams to secure data at rest, in transit, and in use across environments. Stay updated on emerging threats and recommend mitigation strategies. Partner with Compliance and Legal teams to ensure audit readiness and support data privacy initiatives. Maintain detailed documentation of security architecture, standards, and controls. Location & Experience US-based candidates should be within commuting distance of our San Francisco hub. Candidates should have a minimum of 7+ years of relevant security experience, preferably in large enterprises, including at least 2 years focused on data security. A bachelor’s degree in Computer Science, cybersecurity, or related fields, or equivalent experience, is required. Experience with DLP platforms, encryption, key management, CASB, and data masking tools. Strong understanding of data privacy regulations (GDPR, CCPA, SOX, NIST). Familiarity with cloud platforms (AWS, GCP) and securing cloud data stores (S3, RDS, Snowflake). Proficiency in infrastructure-as-code (Terraform, CloudFormation) and scripting (Python, Bash). Excellent communication skills to translate technical risks into business language. Self-motivated, creative problem solver with the ability to work independently and collaboratively under pressure. Compensation & Benefits Salary range: $215,000 to $260,000 annually, plus benefits and equity. Final salary depends on experience, skills, and level. Health insurance options including Medical, Dental, and Vision. Work-from-home support: home office setup allowance, monthly allowances for cellphone and internet. Retirement plans: 401(k) with employer match up to 4% in the US, international pension plans. Employee engagement: Deep product understanding through dogfooding, with a budget to support active participation. Parental leave: 16 weeks paid parental leave plus a gradual return to work. Equal Opportunity & Application Whatnot is proud to be an Equal Opportunity Employer, valuing diversity and inclusion. We do not discriminate based on race, religion, gender, sexual orientation, age, disability, or other protected statuses. Apply for this job Please fill out the application form, including your name, contact information, resume, LinkedIn profile, and other relevant details. Indicate your current location and legal work authorization status. #J-18808-Ljbffr Whatnot