Senior AppSec Engineer: Secure-by-Default & Tooling Lead

Sift; California (MO); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity

Job summary

Sift is hiring a security-first software engineer to build and own the security of production systems. You’ll drive threat modeling, secure-by-default patterns, and tooling across distributed architectures that power critical hardware platforms.

You will embed SAST/SCA tooling into developer workflows, ensure dependency integrity, and guide security decisions with engineering partners. This role involves on-premise or air-gapped considerations and collaboration across teams.

Qualifications

• 5+ years building production software with direct security ownership
• Fluency reading and reviewing Go or Rust
• Strong grounding in application security: web/API auth and cryptography
• Hands-on experience embedding security tooling into CI/CD
• Track record building security tooling used by teams
• Clear communication with engineers and leadership about risk

Responsibilities

• Secure-by-default guardrails: patterns, libraries, and standards for authentication and cryptography
• Own dependency integrity, artifact signing, and build-pipeline trust for self-managed deployments
• Threat modeling and secure design for distributed systems
• Own appsec toolchain in CI/CD: SAST, SCA, secret scanning, fuzzing
• Raise engineering security fluency through design reviews and documentation

Skills

Production security ownership

Go or Rust

Threat modeling

Security tooling

Communication

Tools

SAST

SCA

Secret scanning

Job description

Sift is hiring a security-first software engineer to build and own the security of production systems. You’ll drive threat modeling, secure-by-default patterns, and tooling across distributed architectures that power critical hardware platforms.

You will embed SAST/SCA tooling into developer workflows, ensure dependency integrity, and guide security decisions with engineering partners. This role involves on-premise or air-gapped considerations and collaboration across teams.