{"id":3070,"date":"2026-08-16T07:41:34","date_gmt":"2026-08-16T07:41:34","guid":{"rendered":"https:\/\/tradefinder.help\/?p=3070"},"modified":"2026-08-16T07:41:34","modified_gmt":"2026-08-16T07:41:34","slug":"hightouch-application-security-lead","status":"publish","type":"post","link":"https:\/\/tradefinder.help\/?p=3070","title":{"rendered":"Hightouch: Application Security Lead"},"content":{"rendered":"<p>\n  <strong>Headquarters:<\/strong> Remote (North America)\n<\/p>\n<div class=\"content-intro\">\n<h2>About Hightouch<\/h2>\n<p>Hightouch is an Agentic Marketing Platform powered by the industry-leading Composable CDP. With complete brand context, customer data, and performance history in one place, every marketer finally has the power to build and ship end-to-end campaigns themselves. Teams move faster, stay on brand, and get AI marketing that actually works.<\/p>\n<p>Founded in 2019 and headquartered in San Francisco, Hightouch enables marketing teams to analyze performance, brainstorm ideas, and generate creative at a speed and quality that wasn&#8217;t previously possible.<\/p>\n<p>Named a Leader in the 2026 Gartner\u00ae Magic Quadrant\u2122 for Customer Data Platforms, Hightouch is trusted by leading enterprises like Domino&#8217;s, Spotify, Aritzia, Cars.com, Ramp, and PetSmart.<\/p>\n<p>At Hightouch, our mission is to help our customers leverage data and AI to grow their businesses. The team is ambitious, impact-driven, efficient \u2014 and we believe humility, kindness, and compassion are essential to our success. If you&#8217;re energized by velocity, obsessed with raising the bar, and want to build alongside people who care deeply about each other and our customers, we&#8217;d love to meet you.<\/p>\n<\/div>\n<h2><strong>About<\/strong> <strong>the<\/strong> <strong>Role<\/strong><\/h2>\n<p>This is our first dedicated security hire, and it&#8217;s a rare chance to define the function from the ground up. You&#8217;ll own Hightouch&#8217;s application security posture end-to-end. We have strong engineering fundamentals and a solid foundation; now you&#8217;ll shape what security looks like here as we scale from 70 to 140+ engineers.<\/p>\n<p>This is a hands-on, high-autonomy role. You&#8217;ll spend most of your time in the codebase, not in meetings. You\u2019ll be solving hard problems at the intersection of security and distributed systems:<\/p>\n<ul>\n<li><strong>Multi-tenant<\/strong> <strong>isolation<\/strong> on a system running ~1M data syncs per day and ingesting 100K+ events\/sec<\/li>\n<li><strong>Sub-tenant access control<\/strong> &#8211; for multi-team and multi-brand use cases, requiring differentiated access to configuration and data<\/li>\n<li><strong>Security<\/strong> <strong>architecture<\/strong> &#8211; Build and refine our frameworks for compute isolation and perform threat modeling and hardening of new products<\/li>\n<li><strong>Internet-facing APIs<\/strong> &#8211; Our high-throughput, internet-facing architecture services customer data at scale. You\u2019ll improve our rate limiting, abuse detection, and granularity of access control<\/li>\n<li><strong>Multi-Region and Multi-Cloud &#8211;<\/strong>\u00a0Supporting our multi-region and multi-cloud backend, including extending it to launch Hightouch on in new regions to support data residency requirements of our global customer base<\/li>\n<\/ul>\n<p>You&#8217;ll own your roadmap. We&#8217;re not looking for someone to run a checklist \u2014 we&#8217;re looking for someone who can look at our architecture, identify the highest-leverage problems, and go fix them.<\/p>\n<p>We are looking for talented, intellectually curious, and motivated individuals who are interested in tackling the problems above. This is a senior role, but we focus on impact and potential for growth more than years of experience. The salary range for this position is $180,000 &#8211; $400,000 USD per year, which is location independent in accordance with our remote-first policy. We also offer meaningful equity compensation in the form of ISO options, and offer early exercise and a 10 year post-termination exercise window.<\/p>\n<h2><strong>About<\/strong> <strong>You<\/strong><\/h2>\n<p>You\u2019ve been an early security hire at a SaaS company before and moved the needle on how they approach security. You can read application code, threat model a distributed system, and ship production fixes. You have significant distributed systems expertise so that you can understand and influence what is being built by the product teams and influence from a place of trust.<\/p>\n<p>Experience that&#8217;s relevant:<\/p>\n<ul>\n<li>Being an early security hire (first 1-3) at a SaaS or data infrastructure company<\/li>\n<li>Securing multi-tenant platforms: tenant isolation, authorization models, etc<\/li>\n<li>Cloud security on systems that span more than one cloud and operate against customer-owned accounts<\/li>\n<li>Design and build of data infrastructure as an early engineer, not just a user. You helped secure it from early design or during major redesigns. You understand how it scales and how it\u2019s secured<\/li>\n<li>Privacy-adjacent security (PII handling, data residency, GDPR\/CCPA technical controls)<\/li>\n<\/ul>\n<p>We don&#8217;t care about certifications. We care about what you&#8217;ve built.<\/p>\n<h2><strong>Interview<\/strong> <strong>Process<\/strong><\/h2>\n<ol>\n<li>\n<p><strong>Recruiter<\/strong> <strong>Screen<\/strong> <strong>[30m]<\/strong> &#8211; Introductory mutual fit assessment<\/p>\n<\/li>\n<li>\n<p><strong>Security Architecture Interview<\/strong> <strong>[60m]<\/strong> &#8211; Threat model discussion of a real-ish system, followed by a systems design exercise<\/p>\n<\/li>\n<li>\n<p><strong>Core interview [90m]<\/strong> &#8211; deep dive on distributed systems knowledge<\/p>\n<\/li>\n<li>\n<p><strong>Hiring<\/strong> <strong>Manager<\/strong> <strong>Interview<\/strong> <strong>[60m]<\/strong> &#8211; What you&#8217;ve built in the past, how you work<\/p>\n<\/li>\n<li>\n<p><strong>Security Program Interview [60m]<\/strong> with Head of Engineering \u2014 How you&#8217;ve run security programs in practice: bug bounty, pentest engagements, working with external researchers, and partnering across engineering to drive adoption.<\/p>\n<\/li>\n<\/ol>\n<div class=\"content-conclusion\">\n<p><strong>E-Verify Statement<\/strong><\/p>\n<p><em>Hightouch participates in E-Verify. After you join the team, we&#8217;ll verify your eligibility to work in the U.S. by submitting information from your Form I-9 to the Social Security Administration and, if needed, the Department of Homeland Security. This process happens post-hire only \u2014 we never use E-Verify to pre-screen applicants.<\/em><\/p>\n<p><em><br \/><\/em><a href=\"https:\/\/www.rhoworld.com\/wp-content\/uploads\/E-Verify_Participation_Poster-1.pdf\" target=\"_blank\" rel=\"noopener\"><em>E-Verify Notice<\/em><em><br \/><\/em><\/a><a href=\"https:\/\/www.rhoworld.com\/wp-content\/uploads\/E-Verify_Participation_Poster_ES-1.pdf\" target=\"_blank\" rel=\"noopener\"><em>E-Verify Notice (Spanish)<\/em><em><br \/><\/em><\/a><a href=\"https:\/\/www.rhoworld.com\/wp-content\/uploads\/ier_poster_final.pdf\" target=\"_blank\" rel=\"noopener\"><em>Right to Work Notice<\/em><em><br \/><\/em><\/a><a href=\"https:\/\/www.rhoworld.com\/wp-content\/uploads\/spanish_ier_poster_final.pdf\" target=\"_blank\" rel=\"noopener\"><em>Right to Work Notice (Spanish)<\/em><\/a><\/p>\n<\/div>\n<p><strong>To apply:<\/strong> <a href=\"https:\/\/weworkremotely.com\/remote-jobs\/hightouch-application-security-lead\" target=\"_blank\" rel=\"noopener\">https:\/\/weworkremotely.com\/remote-jobs\/hightouch-application-security-lead<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Headquarters: Remote (North America) About Hightouch Hightouch is an Agentic Marketing Platform powered by the industry-leading Composable CDP. With complete brand context, customer data, and performance history in one place, every marketer finally has the power to build and ship end-to-end campaigns themselves. Teams move faster, stay on brand, and get AI marketing that actually [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3070","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"featured_image_url":[],"post_author":"sonifashionhouse@gmail.com","assigned_categories":"Uncategorized","jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/tradefinder.help\/index.php?rest_route=\/wp\/v2\/posts\/3070","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tradefinder.help\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tradefinder.help\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tradefinder.help\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tradefinder.help\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3070"}],"version-history":[{"count":0,"href":"https:\/\/tradefinder.help\/index.php?rest_route=\/wp\/v2\/posts\/3070\/revisions"}],"wp:attachment":[{"href":"https:\/\/tradefinder.help\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tradefinder.help\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tradefinder.help\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}