Security obsessed lead engineer

Ever suffered from password fatigue and reused passwords and put your accounts at risk? ThumbSignin (a business unit of Pramati) enables authentication with a touch so you can add easy to use and secure authentication to online services.

Actually if you did suffer from password fatigue and reused passwords, we *don't* want you on our team. We want you if you're interested in making life more secure for those who do have the fatigue.

So we're looking for a lead engineer paranoid and knowledgeable about security. With enough obsession to swear that they don't know their own passwords and only their password manager does. With enough paranoia to look at code for 5 minutes and blurt out a range of vulnerabilities it might have. With enough experience to laugh as a first reaction when anyone makes the claim "this code is 100% secure", try to attack the system immediately, and provide design guidelines to avoid the attacks.  At the same time we want them to have an understanding of the trade offs between security and usability, though we're all about doing both. Having attended key signing parties is a plus.

We have a FIDO certified server product. Our stack is on Java and Golang and we need you to be fluent on those.