Senior Security Engineer

Salary: $107,000 - 147,000 per year Requirements:

• We require 5+ years of experience in security engineering, infrastructure engineering, or application security, ideally within a B2B SaaS or cloud-native environment.
• We need hands-on experience with at least one major public cloud platform, such as Google Cloud Platform or AWS, including IAM, networking, logging and monitoring, and security services.
• We look for strong proficiency in at least one programming or scripting language, such as Python, Go, or Java, with experience using code to automate security controls or detection.
• We value direct experience with AI/LLM-specific security risks, including prompt injection and model supply chain threats.
• We expect a solid understanding of secure application and system design, including authentication and authorization, encryption in transit and at rest, least-privilege access, and secrets management.
• We prefer experience with security tooling such as vulnerability scanners, SAST/DAST tools, SIEM or centralized logging, endpoint protection, or cloud security posture management.
• We need a strong grasp of common vulnerabilities and attack patterns, such as the OWASP Top 10, misconfigurations, and supply-chain risks, along with practical mitigation experience.
• We want someone who can work effectively across engineering, IT, and compliance/legal teams and translate security requirements into actionable implementation details.
• We require clear written and verbal communication skills, including the ability to document designs and decisions and educate others on security best practices.
• We value a collaborative, pragmatic mindset with the ability to make risk-based decisions and support teams in delivering secure, scalable solutions.

• We design and implement security controls and tooling across our infrastructure and applications, including IAM policies, network controls, secrets management, endpoint protections, and container and workload security.
• We partner with product and platform teams to conduct security design reviews, threat modeling, and code or configuration reviews for new features and services.
• We improve our secure SDLC by integrating AI-powered scanning tools and security scanning, including SAST, DAST, dependency scanning, and container scanning, into CI/CD while creating guardrails, templates, and best practices for engineers.
• We own or co-own vulnerability management workflows from discovery and triage through remediation, including setting SLAs, coordinating with service owners, and tracking closure.
• We build automation such as scripts, services, and integrations to detect misconfigurations, anomalous activity, or policy violations and reduce manual work for our security team.
• We participate in security incident response, including investigation, containment, root cause analysis, and long-term fixes.
• We contribute to security documentation and standards, providing clear guidance on authentication, authorization, data encryption, and key management.
• We support audits and assessments, such as SOC 2 and customer security questionnaires, by providing technical evidence and details on control design and effectiveness.
• We mentor other engineers on secure design and implementation through pairing, reviews, training sessions, and written guidance.

• AI
• AWS
• CI/CD
• Cloud
• IAM
• Support
• Java
• LLM
• Machine Learning
• Network
• OWASP
• Python
• REST
• Security

More:

We are Sifts Security Engineering team, responsible for protecting our products, infrastructure, and data while enabling our engineering organization to move quickly and safely. We work closely with product, platform, SRE, IT, and Legal/Compliance teams to secure our systems end to end across application code, CI/CD pipelines, cloud infrastructure, and identity. At Sift, we are intentionally building a diverse, equitable, and inclusive workplace where our people feel safe bringing their authentic selves to work. Sift is the AI-powered fraud platform securing digital trust for leading global businesses, backed by deep machine learning investments, a user identity network scoring 1 trillion events per year, and a commitment to long-term customer success. More than 700 customers rely on us to help them grow with confidence and deliver seamless consumer experiences.

last updated 33 week of 2026