Founding Security Engineer, Sift
Governance, Risk & Compliance
$170-220k
+ Offers Equity
More information about location
2 days a week in office (El Segundo, CA)
Unified observability for modern hardware
Be an early applicant
Unified observability for modern hardware
1-20 employees
Be an early applicant
$170-220k
+ Offers Equity
More information about location
2 days a week in office (El Segundo, CA)
1-20 employees
Company mission
To provide the tools that engineering teams need to efficiently manage hardware data and build the machines of the future.
Role
Who you are
- 5+ years in cybersecurity, product security, or cloud security roles, ideally in high assurance or regulated industries
- Hands on experience securing AWS and Kubernetes based environments, with strong infrastructure as code practices
- Proven track record leading or supporting compliance initiatives such as SOC 2, NIST 800 171, CMMC, FedRAMP, or ISO 27001
- Deep understanding of network, endpoint, and identity security principles
- Experience with security tooling and integration into operational workflows
- Ability to translate compliance requirements into clear, actionable engineering work
- Strong communication skills, able to represent security posture to technical and non technical audiences
- Excited to operate as a team of one early on, with the vision to build and lead a security function over time
- Someone motivated by the responsibility of securing technology that supports national security and high stakes engineering programs
- A builder who can balance pragmatism with rigor in a fast moving startup environment
- A collaborator who can partner across engineering, operations, and go to market teams to make security part of the culture
- Someone comfortable engaging directly with customers, auditors, and partners to explain and advocate for our security posture
What the job involves
- As Sift’s first dedicated Security Engineer, you will not just maintain a security checklist, you will define the posture, architecture, and practices that keep our products and infrastructure secure in the most demanding environments
- You will be both hands on and strategic, building controls, automating compliance, and working directly with customers, auditors, and internal teams to inspire confidence in our platform
- The Security Engineer – GRC will own Sift’s security posture end to end, blending technical security engineering with governance, risk, and compliance leadership
- You will set the standard for how we protect our systems and data, ensuring we are ready to meet and exceed the expectations of aerospace, defense, and enterprise customers
- Set the Standard: Establish a best in class security posture across our product and infrastructure. Make security a competitive advantage, not just a compliance checkbox
- Lead Compliance by Design: Translate frameworks like SOC 2, NIST 800 171, CMMC, and FedRAMP into actionable engineering and operational practices. Oversee our Risk Management Framework (RMF) lifecycle and apply security standards across cloud, on prem, and air gapped environments
- Engineer the Controls: Architect and deploy security tooling, secure CI/CD pipelines, and observability systems. Implement zero trust networking, encryption, and access control across environments
- Enable the Team: Provide approachable, relevant training to engineers and operations teams. Guide secure procurement and use of third party tools and libraries
- Earn Trust Externally: Represent Sift’s security posture clearly and credibly to customers, partners, auditors, and government stakeholders
- Design, implement, and maintain secure cloud native infrastructure (AWS GovCloud, Kubernetes, OpenShift, on prem, and air gapped)
- Build secure CI/CD pipelines with integrated scanning and policy enforcement
- Deploy and manage observability and security tooling (SIEM, EDR, Datadog, ELK, Prometheus, Grafana)
- Implement zero trust networking, VPNs, and encryption best practices
- Maintain policies, procedures, and documentation that withstand customer and auditor scrutiny
- Lead security readiness for customer and government requirements
- Provide security awareness training for internal teams and be the point of contact for all security questions
Our take
Sift develops tools to accelerate and ensure the reliability of complex machines. Its platform processes hardware sensor data, providing automated analysis and detailed reports to identify and explain potential issues. This enables users in aviation, defense, energy and transportation to enhance system reliability and comply with regulatory requirements more efficiently.
The platform automates manual data review, which both enhances reliability and speeds up development. Customers like Astranis and Parallel Systems use Sift's observability stack to turn sensor data into actionable insights, which would have likely remained undiscovered when using other systems.
With funding to its name, Sift is ready to broaden its manufacturing automation suite to link sensor data with manufacturing information. This will mean it can help with anomaly detection and performance analysis. It is also making advancements with AI integration for regulatory compliance, which sets it up as a key innovator in the space.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Jun 2024
$17.5m
SERIES A
Nov 2023
$7.5m
EARLY VC
Total funding: $25m
Company benefits
- Unlimited PTO
- Free lunch, snacks, & coffee
- Top-tier health insurance: Medical, Vision, & Dental
Company HQ
El Segundo, CA
Leadership
Karthik Gollapudi
(CEO)Previously a Dragon Flight Software Lead at Spacex and a Full-Stack Engineer at Information Sciences Institute.
Austin Spiegel
(CTO)Previously a Software Engineering Manager at Riot Games. Prior to that, they worked at SpaceX in various Software Engineering roles.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 34 more jobs at Sift