Privacy Engineer

Asana's Legal team works collaboratively across functions to achieve our ambitious mission of fostering effortless teamwork for everyone. We are a tightly-knit and cooperative group committed to supporting teams throughout the organization, ensuring they have the necessary resources for success while protecting Asana's core values and interests.

• Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure.
• Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity.
• Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs.
• Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identification frameworks.
• Conduct privacy impact assessments and threat modeling for high-risk data processing activities.
• Advocate for privacy-preserving solutions, serve as a trusted technical advisor across the business, and identify new opportunities to improve our overall privacy posture.
• Partner cross-functionally to ensure our privacy policies and notices accurately reflect our underlying technology.
• Develop customer-facing trust documentation on privacy and support privacy incident response efforts.
• Design and implement privacy-preserving analytics and measurement systems that provide actionable insights while protecting individual user privacy.

• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.
• 6+ years of software engineering experience, with 3+ years focused on privacy or data protection.
• Passion for privacy and data protection with a deep understanding of GDPR, CCPA, and emerging global privacy frameworks.
• Proven experience building technical controls for data governance, including classification, lineage, retention, and deletion at scale.
• Familiarity with privacy risks in ML systems, such as training data sourcing, model memorization, and inference privacy.
• Strong foundation in privacy-by-design principles and hands-on experience applying them throughout product development.
• Demonstrated ability to translate complex regulatory and legal requirements into clear engineering specifications.
• Experience with cryptographic techniques, anonymization, and de-identification frameworks.
• Strong communication and collaboration skills, with a track record of partnering effectively with legal, policy, and non-technical stakeholders.

• This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid schedule.
• If based in-office: The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner.
• For this role, the estimated base salary range will vary based on your location. Locations in the US are categorized into one of three geographic pay zones, and the ranges for the zones are as follows: Zone A: $235,000 - $267,000; Zone B: $211,000 - $240,000; Zone C: $189,000 - $216,000.
• In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits.
• We strive to provide equitable and competitive benefits packages that support our employees worldwide and include: Mental health, wellness & fitness benefits; Career coaching & support; Inclusive family building benefits; Long-term savings or retirement plans.