Data Security Engineer, Whatnot
$215-260k
+ Equity
More information about location
Live stream platform & marketplace for collectibles
Be an early applicant
Live stream platform & marketplace for collectibles
501-1000 employees
Be an early applicant
$215-260k
+ Equity
More information about location
501-1000 employees
Company mission
Whatnot missions is to enable anyone to turn their passion into a business and bring people together through commerce.
Role
Who you are
- As our Data Security Engineer you should have a minimum of 7+ years of relevant experience in security preferably in a large enterprise environment
- Bachelor’s degree in Computer Science, computer engineering, cybersecurity, a related field, or equivalent work experience
- 7+ years of experience in cybersecurity, with at least 2 years focused specifically on data security
- Hands-on experience with one or more of the following: DLP platforms, encryption and key management, CASB, and data tokenization/masking tools
- Strong understanding of data privacy regulations and standards (e.g. , GDPR, CCPA, SOX, NIST)
- Familiarity with cloud platforms (AWS, GCP) and securing cloud-based data stores (e.g. , S3, RDS, Snowflake)
- Ability to write and review secure infrastructure-as-code (e.g. , Terraform, CloudFormation) and scripting (e.g. , Python, Bash)
- Excellent communication skills with the ability to translate technical risks into business language
- Self-motivated and creative problem-solver able to work independently with minimal guidance
- Strong ability to work collaboratively across teams during high-stress situations
- Ability to manage multiple competing priorities and use good judgment to establish an order of priorities on the fly
What the job involves
- The Data Security Engineer is responsible for developing and overseeing technology security systems to help protect those systems and associated ones from the effects of various kinds of cybercrime
- Advance our customers' access to our applications and services by offering seamless access control mechanisms, advanced authentication methods, progressive profiling, and a consolidated identity
- Developing plans for increased security across the systems
- Putting various protections into place
- Testing and re-testing systems for known vulnerabilities
- Monitoring systems for security breaches
- Investigating those breaches and any other anomalies
- Design and implement scalable data protection solutions (e.g. , encryption, tokenization, DLP, data masking) for structured and unstructured data
- Support and enforce data classification, labeling, and handling policies aligned with regulatory and business needs (e.g. , PCI-DSS, GDPR, CCPA)
- Manage data loss prevention (DLP) systems and drive incident response for data exfiltration or unauthorized access events
- Integrate data security controls into CI/CD pipelines and DevSecOps frameworks
- Perform risk assessments and threat modeling for data-related systems and flows
- Collaborate with Infrastructure, Cloud, and AppSec teams to secure data at rest, in transit, and in use across diverse environments
- Monitor emerging data security threats and recommend technical and procedural controls to mitigate risk
- Partner with Compliance and Legal teams to ensure audit readiness and support data privacy initiatives
- Maintain detailed documentation of data security architecture, standards, and controls
Our take
The collectible toy market is large, and Whatnot has built a unique social platform that enables sellers to use livestreams to showcase their products and reach more buyers. The company’s focus is on collectible toys, some of which are rare and can cost thousands of dollars, and has also expanded to sports cards.
The idea of Whatnot was led by buyer trends. Instagram's live feature became a popular place for selling toys and trading cards, but of course was not set up to facilitate bidding or handling payments after a sale occurs. Whatnot combines live showcasing with follow-up sale capabilities, thus serving the community in a more novel way than established collectibles market players such as eBay.
The company has grown fast. It was established in 2019 and has already expanded from its original category - Funko Pop figurines - to Pokemon cards, pins, sports cards, and many more. There is still plenty of scope for expanding into new categories, as the company aims to establish itself as the go-to for this large niche, which will be facilitated by the strong levels of funding that Whatnot has raised.
Steph
Company Specialist at Welcome to the Jungle
Insights
54% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jan 2025
$265m
SERIES E
Jul 2022
$260m
SERIES D
Total funding: $749.2m
Company benefits
- Wellness: Health, dental, vision, and life insurance plans. We also cover some of the cost for your dependents as well.
- Compensation: Full-time Whatnauts receive equity, a WFH stipend to support your remote workspace and a monthly stipend to dogfood the app.
- Recharge: Flexible Time Off policy, holiday week off at the end of year, and paid parental leave after 1 year with us.
- Flexibility: Remote-first work culture. We provide a working environment where you're in charge of your time and schedule.
Company HQ
Marina del Rey, CA
Leadership
Grant LaFontaine
(Co-Founder & CEO)Former Product Marketing Manager at Google, Project Manager at Facebook. Also co-founded Kit.
Logan Head
(Co-Founder)Experience in Engineering, including at Maker's Row, Factr, and Flight Club. Former Senior Product Manager at GOAT.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 59 more jobs at Whatnot