Member of Technical Staff — Security

What you'll do: Ship customer-facing security: Device tracking, passkeys, security notifications, suspicious-login detection - features sellers and buyers actually feel. Harden the internals: Improve IAM across AWS, databases, and internal tools; triage and remediate vulnerabilities; put Dependabot, SAST, image scanning, and AI security review into CI.Make compliance real: Translate PCI and SOC 2 requirements into scalable controls, and stand up security alerting signals and pipelines. Own the full stack of security: application, infra, GRC, and ops - building tools that empower other engineers, not just writing tickets. Who this is for Full-stack security engineers (or software engineers with a security focus) who build solutions, not just audit them. People who can explain risk, impact, and exploit scenarios to a broader audience - and take end-to-end ownership. What we look for Comfort working on security across app, infra, compliance, and operations Based in (or willing to relocate to) Palo Alto - we build in person How we work Whop is a company of about 100 people, most of the team are former founders and entrepreneurs. We give people real agency, meaningful resources, and ownership of hard problems. We expect everyone to move fast, tell the truth, and improve every surface they touch. Be technical. Your work should be correct, grounded in fact, and able to withstand scrutiny Force function. Solve the root cause and make the system materially better Disagree then commit. Debate hard before a decision, then execute together What Whop offers Best in class cash compensation and meaningful equity A high trust environment with real ownership and direct access to company leaders Meals, wellness support, and office benefits designed for an in-person team Whop is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for everyone.