Application Security Lead, Hightouch
AI platform for marketers
Open for applications
AI platform for marketers
201-500 employees
Open for applications
201-500 employees
Company mission
To make the best customer data technology in the world available to every enterprise.
Role
Who you are
- You’ve been an early security hire at a SaaS company before and moved the needle on how they approach security. You can read application code, threat model a distributed system, and ship production fixes. You have significant distributed systems expertise so that you can understand and influence what is being built by the product teams and influence from a place of trust
- Being an early security hire (first 1-3) at a SaaS or data infrastructure company
- Securing multi-tenant platforms: tenant isolation, authorization models, etc
- Cloud security on systems that span more than one cloud and operate against customer-owned accounts
- Design and build of data infrastructure as an early engineer, not just a user. You helped secure it from early design or during major redesigns. You understand how it scales and how it’s secured
- Privacy-adjacent security (PII handling, data residency, GDPR/CCPA technical controls)
- We don't care about certifications. We care about what you've built
What the job involves
- This is our first dedicated security hire, and it's a rare chance to define the function from the ground up. You'll own Hightouch's application security posture end-to-end. We have strong engineering fundamentals and a solid foundation; now you'll shape what security looks like here as we scale from 70 to 140+ engineers
- This is a hands-on, high-autonomy role. You'll spend most of your time in the codebase, not in meetings. You’ll be solving hard problems at the intersection of security and distributed systems:
- Multi-tenant isolation on a system running ~1M data syncs per day and ingesting 100K+ events/sec
- Sub-tenant access control - for multi-team and multi-brand use cases, requiring differentiated access to configuration and data
- Security architecture - Build and refine our frameworks for compute isolation and perform threat modeling and hardening of new products
- Internet-facing APIs - Our high-throughput, internet-facing architecture services customer data at scale. You’ll improve our rate limiting, abuse detection, and granularity of access control
- Multi-Region and Multi-Cloud - Supporting our multi-region and multi-cloud backend, including extending it to launch Hightouch on in new regions to support data residency requirements of our global customer base
- You'll own your roadmap. We're not looking for someone to run a checklist — we're looking for someone who can look at our architecture, identify the highest-leverage problems, and go fix them
Application process
- Recruiter Screen [30m] - Introductory mutual fit assessment
- Security Architecture Interview [60m] - Threat model discussion of a real-ish system, followed by a systems design exercise
- Core interview [90m] - deep dive on distributed systems knowledge
- Hiring Manager Interview [60m] - What you've built in the past, how you work
- Security Program Interview [60m] with Head of Engineering — How you've run security programs in practice: bug bounty, pentest engagements, working with external researchers, and partnering across engineering to drive adoption
Our take
With the growing need to combine data sources, along with the rise of cloud computing, demand for effective data integration tools and services has been on the rise. Hightouch provides a composable customer data platform to serve innovative marketers, alongside AI-powered tools for marketing.
Hightouch's platform helps marketers to build audiences and customer identities, collect and synch data, and analyse campaigns. LLM-based agents can be deployed to help streamline marketing, and the platform also supports AI decisioning. This comprehensive suite enables Hightouch to serve a range of businesses such as Spotify, Docusign, Warner Music Group, Grammarly and Autotrader.
Through development and acquisitions, such as of Workbase and Whatis, Hightouch has expanded steadily over the years. So long as it continues to enhance its capabilities and provide seamless data activation for its growing customer base, the company should have a bright future ahead of it.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
11% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Apr 2026
$150m
SERIES D
Feb 2025
$80m
SERIES C
Total funding: $322.4m
Company benefits
- Hub & Remote friendly: Join our global team, either remotely or in one of our four in-person hubs. For those near a hub, enjoy complimentary lunches on Tuesdays and Thursdays
- Flexible PTO: Downtime is just as important as on time and your teammates will support you while you relax and recharge
- Core benefits: For full-time US-based employees, we cover all health benefit premiums, 80% for dependents, and life insurance
- Parental leave: We value and support the family planning process. We provide up to 16 weeks for parents
- Professional development: We support employees for all learning resources needed to grow in their role (classes, books, conferences, etc)
- Connectivity: We offer a $50 per month cell-phone or wifi connectivity stipend to all employees
- Commuter: Commuter benefits of $50 are offered to both employees who come into the offices and to remote workers working outside of their home
Company HQ
Mission District, San Francisco, CA
Leadership
Tejas Manohar
(Co-CEO & Co-Founder)A Software Engineer with experience in lead roles at Lottery.com and Segment. Co-founded Hightouch in 2019.
Josh Curl
(CTO & Co-Founder)Significant Software Engineering experience at Rancher Labs and Segment. Co-founded Deviceplane in 2019 before co-founding Hightouch.
Kashish Gupta
(Co-CEO & Co-Founder)Experience as a Product Manager for LYNK in 2016. Founded Mama's Cookin' in 2015 before co-founding Hightouch in 2019.
Share this job
View 51 more jobs at Hightouch