Senior Privacy Engineer

Role Overview

As a Senior Privacy Engineer on Asana’s Privacy Engineering team, you will help build privacy into Asana’s products from the ground up. You’ll bridge the legal, regulatory, and technical aspects of privacy, partnering closely across the organization and reporting to the Head of Global Privacy, Data Protection, and Compliance.

Responsibilities

• Lead technical privacy-by-design reviews for new features and major architectural changes.
• Embed privacy controls early across the product, business, and data/infrastructure lifecycle.
• Translate global privacy requirements (e.g., GDPR, CCPA) into engineering standards, frameworks, and tooling.
• Assess and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs.
• Build and operate systems that enable user data rights and privacy-enhancing technologies (PETs) such as:
  • data minimization
  • de-identification frameworks
• Conduct privacy impact assessments and threat modeling for high-risk processing.
• Serve as a trusted technical advisor; advocate privacy-preserving solutions to improve overall privacy posture.
• Partner cross-functionally so privacy policies/notices reflect underlying technology.
• Create customer-facing trust documentation and support privacy incident response.
• Design and implement privacy-preserving analytics and measurement systems.

Requirements

• 6+ years of software engineering experience, including 3+ years focused on privacy or data protection.
• Deep understanding of GDPR, CCPA, and emerging global privacy frameworks.
• Experience building technical controls for data governance at scale, including classification, lineage, retention, and deletion.
• Knowledge of privacy risks in ML (e.g., training data sourcing, memorization, inference privacy).
• Strong privacy-by-design fundamentals with hands-on application in product development.
• Ability to translate complex regulatory/legal requirements into clear engineering specifications.
• Experience with cryptographic techniques, anonymization, and de-identification.
• Strong communication and collaboration across legal/policy and non-technical stakeholders.

Nice to Have

• Curiosity about AI tools and emerging technologies and willingness to learn how they can improve work and decisions.
• Ability to develop measurement/analytics systems that balance insight and individual privacy.