SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fireworks is a Series D AI infrastructure company (valued at $17.5B) that enables enterprises to build, train, and serve AI models tailored to their data and workflows. The company is backed by AMD, NVIDIA, Sequoia, Benchmark, and others, and has achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II certifications.
You will own the technical core of Fireworks' privacy program, building automation and systems that keep privacy operations running at scale. This is a hands-on role combining privacy expertise with engineering—you'll write scripts, queries, and automation to eliminate manual work and embed privacy into the company's AI infrastructure.
Key responsibilities:
- Build the privacy automation layer: scripts, scheduled jobs, API integrations, and LLM-based agents for request routing, evidence collection, and control monitoring
- Own the data subject rights (DSR) program end-to-end: intake, identity verification, fan-out across data stores, fulfillment tracking, and audit trails
- Build and maintain a data inventory and ROPA that derives from the actual environment (cloud APIs, warehouse metadata, IaC) rather than interviews, with automated drift reconciliation
- Embed privacy into product development: review designs and PRs for data handling, advise on de-identification and encryption patterns, give engineers concrete implementation guidance
- Own retention and deletion as an engineering problem: translate requirements into data-store-specific rules, work with engineering on enforcement, and verify deletion actually occurs
- Support consent management and preference handling across web properties and product surfaces
- Solve AI-specific data problems: trace customer data through training, fine-tuning, inference, and logging; validate zero-retention and isolation claims; build checks that keep those claims true as the platform evolves
- Take on additional privacy projects as the program grows
Growth trajectory includes moving from operating established processes to owning entire workstreams, leading privacy tooling and agent design, advising product and engineering teams on technical privacy-by-design decisions, and becoming the go-to technical privacy subject matter expert.
Requirements:
- 4–7 years of experience in privacy, GRC, IT audit, information security, or closely related field with meaningful hands-on privacy work
- Working knowledge of GDPR and CCPA/CPRA; familiarity with ISO 27701, ISO 27001, ISO 42001, SOC 2, and NIST
- Hands-on experience with technical privacy operations: data subject requests, ROPA or data inventory maintenance, privacy impact assessments, or retention enforcement
- Demonstrated track record of automating your own work using AI tooling, scripts, workflow builders, or privacy/GRC platform automation features
- Working proficiency in SQL and at least one scripting language (ability to query a warehouse, call an API, parse a schema, and automate recurring tasks independently)
- Hands-on familiarity with cloud environments (AWS, GCP, or Azure): IAM, access scoping, logging, data stores and retention behavior, data discovery
- Strong written communication; ability to translate privacy requirements for engineers, customers, and non-technical employees
Nice to have:
- Built something with an LLM API or agent framework that others relied on
- Experience with de-identification or synthetic data techniques
- Exposure to data lineage or catalog tooling (dbt, DataHub, Atlan, Monte Carlo, OpenMetadata)
- Privacy or security work at an AI/ML company (model data flows, inference logging, training data provenance)
- Startup or fast-growing SaaS background
