Senior Software Engineer, Truffle Security
Microsoft Integrations
$160-200k
Software for identifying and remediating leaked sensitive information
Be an early applicant
Software for identifying and remediating leaked sensitive information
21-100 employees
Be an early applicant
$160-200k
21-100 employees
Company mission
To make security issues more identifiable, accessible, and easier to fix.
Role
Who you are
- Strong backend engineering experience in Go
- Experience building production-grade integrations against Microsoft or enterprise SaaS ecosystems
- Deep understanding of OAuth, authentication, authorization, and identity systems
- Experience working with APIs at scale and handling complex permission models
- Strong debugging skills and distributed systems fundamentals
- Ability to independently drive technical projects end-to-end
- Excellent communication and collaboration skills
- Experience with Microsoft Graph APIs
- Familiarity with Entra ID / Azure AD
- Experience with SharePoint, Teams, OneDrive, Azure Storage, or Azure DevOps
- Experience with .NET / C#
- Experience operating cloud-native systems and infrastructure
What the job involves
- We’re expanding our enterprise integrations platform to better support organizations operating heavily in the Microsoft ecosystem
- We’re looking for a senior engineer to lead development of high-impact integrations across platforms like SharePoint, OneDrive, Teams, Azure Blob Storage, and Azure DevOps
- This role is focused on building reliable, scalable integrations that work correctly within Microsoft’s complex identity, permissions, and authorization models
- You’ll work closely with platform engineering, product, customer-facing teams, and security researchers to improve how TruffleHog discovers and secures secrets across enterprise environments
- Build and maintain integrations for Microsoft platforms including SharePoint, OneDrive, Teams, Azure Blob Storage, and Azure DevOps
- Design and implement robust authentication and authorization handling using Microsoft Graph APIs, Entra ID (Azure AD), OAuth2, and enterprise access patterns
- Improve performance, scalability, and reliability of large-scale content scanning systems
- Develop testing and validation strategies for permission-aware scanning in real-world enterprise environments
- Help define architectural patterns and reusable SDK abstractions for future enterprise integrations
- Partner with product and customer-facing teams to close integration gaps and support enterprise deployments
- Drive projects from design through production with a high degree of ownership
- Our tech stack:
- Go (Golang)
- Microsoft Graph API, Azure SDKs, Azure DevOps APIs
- OAuth 2.0 / OpenID Connect
- Kubernetes, Docker, PostgreSQL
- GCP infrastructure
Our take
Data breaches can be detrimental to companies, particularly when they regard the leaking of sensitive data such as private keys and login credentials. However, such breaches are common and can be difficult to identify due to the vast range of platforms and SaaS that modern businesses use, often resulting in leaks only being identified when it's too late to prevent.
Truffle Security provides a software tool named TruffleHog that identifies and remediates sensitive information that has leaked within a business's digital infrastructure, running scans automatically to catch vulnerable data before it leaks. The software integrates within major SaaS platforms such as Slack, AWS, Gmail, and Github, also offering bespoke integration services for unique business infrastructures.
Whilst many cybersecurity platforms can identify the source of data leaks early to minimize their impact, Truffle Security has recognized that this is often too little too late. By constantly scanning business environments behind the scenes and raising $25 million in 2025, the company shows great potential to disrupt the data protection market by completely preventing data leaks and thus removing the need for recovery specialists.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Nov 2025
$25m
SERIES B
Dec 2021
$15m
SERIES A
Total funding: $40m
Company benefits
- 401(k) with 6% company match
- Flexible paid time off: 14 paid holidays, including Thanksgiving and Winter break, and "Truffle Holidays" where the entire company takes a day off
- Medical, dental, and vision coverage: 80% Premium coverage for employees & their dependents
- Remote work stipend: $800 new hire stipend, and $100monthly thereafter. We want you to be comfortable working remotely
- Health & wellness stipend: $1,200/year. Maintaining your physical mental, and emotional well-being is foundational to doing your best work
- Learning & development stipend: $2,000/year. Adopting a growth-mindset allows you to grow professionaly and personally
- Company off-sites: We’re 100% remote with no office, but won’t let that stop us from working closely together. Past destinations have included Hawaii, Cabo, Chicago, Savannah, and the Rocky Mountains
Company HQ
West Oakland, Oakland, CA
Leadership
Dylan Ayrey
(Co-Founder & CEO)Graduated from Rochester Institute of Technology with a BS in Computer Engineering. Experienced Senior Security Partner having worked at Netflix.
Dustin Decker
(Co-Founder & CTO)Before co-founding Truffle Security, they were a Senior Security Engineer at Cruise and an Application Security Engineer at Indeed.
Share this job
View 6 more jobs at Truffle Security