Staff Security Engineer, Privacy Infrastructure

About Terzo

Terzo builds an AI-native enterprise data platform designed to power the commercial and financial operating system of modern companies. The platform transforms complex, unstructured enterprise data into structured, actionable intelligence used directly in operational and financial decision-making. Terzo sits at the intersection of data platforms, AI systems, and enterprise software, focusing on real production use cases rather than demos or point solutions.

 

The Opportunity

Enterprise customers trust Terzo with their most sensitive commercial data including contracts worth hundreds of millions of dollars, vendor financials, spend records, legal obligations. As the platform scales across Fortune 500 organizations and AI agents operate autonomously on customer data, protecting that data isn't just a compliance requirement but a product promise.

You will design and build the privacy and data security infrastructure for the Terzo Platform. This means applying cryptographic enforcement to ensure that customer data access is provably bounded across tenant boundaries, within organizational hierarchies, and throughout agentic processing pipelines.  As Terzo expands its agentic architecture, spanning autonomous agents, MCP integrations, and tool-use runtimes, you will define how sensitive data flows through AI systems with verifiable access controls, role-based execution isolation, and auditable data lineage.  You will push the boundaries of privacy infrastructure, reaching into advanced techniques including zero-knowledge proofs and verifiable credentials while applying the pragmatic engineering judgement to know when simpler primitives deliver value faster.

This role sits at the intersection of applied cryptography, distributed systems, and AI infrastructure. You will work directly with Engineering leadership to make privacy-by-design a core platform capability, one that becomes a competitive differentiator as enterprise customers demand verifiable trust guarantees rather than compliance attestations.

 

You might thrive in this role if you have

• 5+ years of software engineering experience with meaningful depth in applied cryptography or security systems
• Working knowledge of zero-knowledge proof systems (zkSNARKs, zkSTARKs, or similar) 
• Experience implementing privacy-preserving protocols or access control systems in production environments
• Understanding of how AI agents, tool-use runtimes, and agentic infrastructure create new data exposure surfaces and delivering novel solutions
• Strong software engineering fundamentals where you build reliable, maintainable systems in Python, Rust, Go, or similar
• Ability to translate cryptographic concepts into product capabilities that non-cryptographers can use and trust
• Understanding of data privacy regulations (GDPR, SOC 2, CCPA) and how cryptographic controls map to compliance requirements
• High ownership mentality where you treat data privacy as a product feature, not a compliance checkbox

You could be an especially great fit if you have

• Experience applying ZKP or privacy-preserving computation (MPC, homomorphic encryption, differential privacy) to enterprise data problems
• Background building data isolation, tenant separation, or role-based privacy enforcement for multi-tenant SaaS platforms
• Experience securing agentic AI systems and building safeguards on what autonomous agents can access, exfiltrate, or infer across trust boundaries
• Prior work in regulated industries (financial services, healthcare, government) where data segregation is contractual and auditable
• Familiarity with enterprise security frameworks (SOC 2, ISO 27001, CMMC) and how to implement them as engineering systems
• Experience with cloud-native security architecture on Azure or AWS
• Prior work at a company where you had to make advanced cryptography practical and shippable
• MS or PhD in cryptography, computer science, or mathematics