Member of Technical Staff - SecurityWhop • Palo Alto, CA • Full-time, in-person
What you'll do- Ship customer-facing security: Device tracking, passkeys, security notifications, suspicious-login detection - features sellers and buyers actually feel.
- Harden the internals: Improve IAM across AWS, databases, and internal tools; triage and remediate vulnerabilities; put Dependabot, SAST, image scanning, and AI security review into CI.
- Make compliance real: Translate PCI and SOC 2 requirements into scalable controls, and stand up security alerting signals and pipelines.
- Own the full stack of security: application, infra, GRC, and ops - building tools that empower other engineers, not just writing tickets.
Who this is for- Full-stack security engineers (or software engineers with a security focus) who build solutions, not just audit them.
- People who can explain risk, impact, and exploit scenarios to a broader audience - and take end-to-end ownership.
What we look for- Comfort working on security across app, infra, compliance, and operations
- Based in (or willing to relocate to) Palo Alto - we build in person
How we workWhop is a company of about 100 people, most of the team are former founders and entrepreneurs. We give people real agency, meaningful resources, and ownership of hard problems. We expect everyone to move fast, tell the truth, and improve every surface they touch.
- Be technical. Your work should be correct, grounded in fact, and able to withstand scrutiny
- Force function. Solve the root cause and make the system materially better
- Disagree then commit. Debate hard before a decision, then execute together
What Whop offers- Best in class cash compensation and meaningful equity
- A high trust environment with real ownership and direct access to company leaders
- Meals, wellness support, and office benefits designed for an in-person team
