Nylas is a Latacora client. I think they’re a great place to work overall, but I can tell you a bunch about the prodsec role. Contact info in profile.

Email and contacts integration is either table stakes or a superpower for a giant number of products. This is so obvious to me now it hardly seems worth a paragraph. Nylas is also clearly much better at executing on that than individual startups will be at effectively every scale.

If you’ve written those integrations before, consider: what if you were using IMAP and CalDAV, except instead of a myriad of incompatible dialects that never made sense to begin with, you had a good API instead?

We’ve been running security for them for a while, so you can be pretty confident you’re not inheriting a clown fire and that you have a friendly set of faces to show you around while you find your bearings.

The things that excite me most about prodsec here are in a) their ability to ship new product b) the world’s general inability to talk about security and privacy for this sort of access cogently. Nylas has a solid foundation with a pile of products and integrations waiting to happen. That means their technology is being put in new contexts (eg a whitelabeled modal or something) that have new security implications that they’re not used to. That’s where your expertise comes in so there are plenty of opportunities for you to obviously and directly contribute. Similarly: Nylas lives in an environment where consumers and regulators are increasingly concerned about privacy. Industry is barely playing catch up. If you want to shape how we talk about data safety ten years from now, there are few places better to do that at than Nylas. (Yes, there are industry giants who are sitting on far worse troves. Doesn’t matter: turns out you’re helping them figure this out a lot more than you’d expect.)

There are few people in the industry I respect more than Spang. You want to work with Spang.

(You might think there is a COI with me talking up a client, but keep in mind we’re a small consultancy that’s happy to end engagements that aren’t working out, and security placement is a supply-dominated repeat game.)