Senior Cloud Security Engineer – Build Secure, Scalable Systems

Sift; San Francisco, Seattle (CA, WA); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Sift is seeking a Senior Security Engineer to design, implement, and operate security controls across its stack. You will embed with product and platform teams, mentor engineers, and contribute to audits and compliance efforts.

You will secure CI/CD pipelines, manage vulnerabilities, and help strengthen the secure development lifecycle with automation and tooling in a cloud-native environment.

Qualifications

• 5+ years of experience in security engineering, infrastructure engineering, or application security in a B2B SaaS or cloud-native environment.
• Hands-on with at least one major public cloud platform (AWS/GCP) including IAM, networking, logging/monitoring, and security services.
• Proficient in a programming or scripting language and able to automate security controls or detection.
• Experience with AI/LLM-specific security risks (prompt injection, model supply chain, etc.).
• Knowledge of secure application and system design, including authentication/authorization, encryption, least-privilege, and secrets management.
• Experience with security tooling (Vulnerability scanners, SAST/DAST, SIEM, cloud security posture).
• Ability to work cross-functionally with engineering, IT, and compliance/legal teams.

Responsibilities

• Design and implement security controls and tooling across Sift’s infrastructure and applications (IAM, network controls, secrets management, endpoint protections, container security).
• Embed with product and platform teams to conduct security design reviews, threat modeling, and code/config reviews for new features and services.
• Improve the secure SDLC by integrating AI-powered scanning tools and CI/CD security practices, and by developing guardrails and best practices.
• Own or co-own vulnerability management workflows from discovery to remediation, including SLAs and coordination with owners.
• Develop automation to detect misconfigurations, anomalous activity, or policy violations and reduce manual work.
• Participate in security incident response (on-call or escalation) including investigation and root cause analysis.
• Contribute to security documentation and standards on authentication, authorization, encryption, and key management.
• Support audits and assessments (SOC 2, security questionnaires) with technical details and evidence.
• Mentor engineers on secure design and implementation practices through pairing, reviews, and training.

Skills

Security engineering

Cloud platforms (AWS/GCP)

Programming/scripting

Threat modeling

Vulnerability management

CI/CD security

AI/LLM security

Cross-functional collaboration

Tools

SIEM

SAST/DAST tools

Cloud security posture management

IAM & access controls

Endpoint protection

Job description

Sift is seeking a Senior Security Engineer to design, implement, and operate security controls across its stack. You will embed with product and platform teams, mentor engineers, and contribute to audits and compliance efforts.

You will secure CI/CD pipelines, manage vulnerabilities, and help strengthen the secure development lifecycle with automation and tooling in a cloud-native environment.