Truffle Security is a San Francisco–based open-source cybersecurity company that helps organizations find and remediate leaked secrets and non-human identities (NHIs).
<div class="content-intro"><p><span style="font-size: 16pt;"><strong>About us</strong></span></p> <p>Truffle Security is a cybersecurity company on a mission to make secrets easier to detect, verify, and remediate across modern software environments. Built on the popular open-source <a href="https://github.com/trufflesecurity/truffleHog">TruffleHog</a>™ secrets scanning platform, the company's enterprise solution gives security and engineering teams everything they need to find exposed credentials, understand which ones are active, and act on them with confidence.<br><br>With support for 800+ credential types, Truffle Security continuously monitors non-human identities (NHIs) and their associated secrets across code repositories, SaaS applications, wikis, and cloud systems. It goes beyond detection by verifying which secrets are live, analyzing their scope of access, and streamlining remediation through automated workflows and lifecycle management so teams can prioritize what to revoke and confirm it's done without manual follow-up.<br><br>Trusted by organizations including NVIDIA, Chick-fil-A, and OpenAI, Truffle Security helps security and engineering teams stay ahead of secrets risk.</p></div><p><span style="font-size: 16pt;"><strong>About the role</strong></span></p> <p>We’re expanding our enterprise integrations platform to better support organizations operating heavily in the Microsoft ecosystem. We’re looking for a senior engineer to lead development of high-impact integrations across platforms like SharePoint, OneDrive, Teams, Azure Blob Storage, and Azure DevOps.</p> <p>This role is focused on building reliable, scalable integrations that work correctly within Microsoft’s complex identity, permissions, and authorization models. You’ll work closely with platform engineering, product, customer-facing teams, and security researchers to improve how TruffleHog discovers and secures secrets across enterprise environments.</p> <p><span style="font-size: 16pt;"><strong>What you'll be working on</strong></span></p> <ul> <li>Build and maintain integrations for Microsoft platforms including SharePoint, OneDrive, Teams, Azure Blob Storage, and Azure DevOps</li> <li>Design and implement robust authentication and authorization handling using Microsoft Graph APIs, Entra ID (Azure AD), OAuth2, and enterprise access patterns</li> <li>Improve performance, scalability, and reliability of large-scale content scanning systems</li> <li>Develop testing and validation strategies for permission-aware scanning in real-world enterprise environments</li> <li>Help define architectural patterns and reusable SDK abstractions for future enterprise integrations</li> <li>Partner with product and customer-facing teams to close integration gaps and support enterprise deployments</li> <li>Drive projects from design through production with a high degree of ownership</li> </ul> <p><span style="font-size: 16pt;"><strong>What we're looking for</strong></span></p> <ul> <li>Strong backend engineering experience in Go </li> <li>Experience building production-grade integrations against Microsoft or enterprise SaaS ecosystems</li> <li>Deep understanding of OAuth, authentication, authorization, and identity systems</li> <li>Experience working with APIs at scale and handling complex permission models</li> <li>Strong debugging skills and distributed systems fundamentals</li> <li>Ability to independently drive technical projects end-to-end</li> <li>Excellent communication and collaboration skills</li> </ul> <p><span style="font-size: 16pt;"><strong>What we're looking for</strong></span></p> <ul> <li>Experience with Microsoft Graph APIs</li> <li>Familiarity with Entra ID / Azure AD</li> <li>Experience with SharePoint, Teams, OneDrive, Azure Storage, or Azure DevOps</li> <li>Experience with .NET / C#</li> <li>Experience operating cloud-native systems and infrastructure</li> </ul> <p><span style="font-size: 21.3333px;"><strong>Our tech stack</strong></span></p> <ul> <li>Go (Golang)</li> <li>Microsoft Graph API, Azure SDKs, Azure DevOps APIs</li> <li>OAuth 2.0 / OpenID Connect</li> <li>Kubernetes, Docker, PostgreSQL</li> <li>GCP infrastructure</li> </ul> <p><strong>Salary Range:</strong> The target base salary range for this position is between $160,000-$200,000 for candidates in the United States. Starting salary will vary based on job-related skills, knowledge, and experience. Leveling will be determined during the interview process. You may also be offered a bonus, stock options, and benefits. These salary ranges are subject to change, and we encourage candidates outside of this salary range to apply.</p> <p> </p><div class="content-conclusion"><p><span style="font-size: 16pt;"><strong>How we support our team</strong></span></p> <ul> <li><strong>Fully remote within the U.S. –</strong> We believe opportunity shouldn’t be limited by geography. Our remote-first approach lets us hire the best people across the United States and empowers them to do their best work from wherever they are.</li> <li><strong>A culture of mentorship, equity, and psychological safety </strong>– We’re committed to fostering an environment where you can thrive, learn, and feel valued.</li> <li><strong data-start="213" data-end="255">Competitive salary & meaningful equity</strong> – Be rewarded for your contributions with a strong compensation package and a stake in our shared success.</li> <li><strong>Flexible paid time off </strong>– We operate with a high level of autonomy and trust, giving you the flexibility to take time off as needed—no strict limits, just the expectation that you’re meeting your commitments and getting your work done.</li> <li><strong>14 paid holidays </strong>– Including Thanksgiving, Winter Break, and "Truffle Holidays" when the entire company takes a well-deserved day off together.</li> <li><strong data-start="625" data-end="658">Comprehensive health benefits</strong> – Medical, dental, and vision coverage wi