Senior Security Engineer, Sift
$145-200k
OTE
Offers equity
Fraud prevention
Open for applications
Fraud prevention
201-500 employees
Open for applications
$145-200k
OTE
Offers equity
201-500 employees
Company mission
Sift's mission is to help everyone trust the internet.
Role
Who you are
- 5+ years of experience in security engineering, infrastructure engineering, or application security, ideally in a B2B SaaS or cloud‑native environment
- Hands‑on experience with at least one major public cloud platform (e.g., GCP, AWS), including IAM, networking, logging/monitoring, and security services
- Strong proficiency in at least one programming or scripting language (e.g., Python, Go, Java, or similar) and experience using code to automate security controls or detection
- Direct experience with AI/LLM-specific security risks (prompt injection, model supply chain, etc.)
- Demonstrated knowledge of secure application and system design, including topics like authentication/authorization, encryption in transit and at rest, least‑privilege access, and secrets management
- Experience with security tooling such as vulnerability scanners, SAST/DAST tools, SIEM/centralized logging, endpoint protection, or cloud security posture management
- Solid understanding of common vulnerabilities and attack patterns (e.g., OWASP Top 10, misconfigurations, supply‑chain risks) and how to mitigate them in practice
- Ability to work cross‑functionally with engineering, IT, and compliance/legal teams, and to translate security requirements into practical implementation details
- Clear written and verbal communication skills, including the ability to document designs and decisions and to educate others on security best practices
- A collaborative, pragmatic approach: you’re comfortable making risk‑based decisions, proposing options, and supporting teams in implementing secure, scalable solutions
What the job involves
- The Security Engineering team is responsible for protecting Sift’s products, infrastructure, and data while enabling our engineering organization to ship quickly and safely
- We embed with product and platform teams, build and run security tooling, and design controls that scale across our cloud‑native environment
- As a Senior Security Engineer, you’ll be a key technical contributor and subject‑matter expert, working on projects that materially reduce risk and strengthen Sift’s security posture
- In this role, you will design, implement, and operate security controls and tooling across Sift’s stack
- You’ll work closely with Engineers, SREs, IT, and Legal/Compliance to secure our systems end‑to‑end—from application code and CI/CD pipelines to cloud infrastructure and identity
- You will also help define our standards, mentor other engineers on secure practices, and contribute directly to audits and compliance efforts
- Design and implement security controls and tooling across Sift’s infrastructure and applications (e.g., IAM policies, network controls, secrets management, endpoint protections, container and workload security)
- Embed with product and platform teams to perform security design reviews, threat modeling, and code or configuration reviews for new features and services
- Improve the secure SDLC by integrating AI-powered scanning tools, security scanning (SAST/DAST, dependency and container scanning) into CI/CD, and by developing guardrails, templates, and best practices for engineers
- Own or co‑own vulnerability management workflows, from discovery and triage through remediation, including defining SLAs, coordinating with service owners, and tracking closure
- Develop automation (scripts, services, integrations) to detect misconfigurations, anomalous activity, or policy violations, and to reduce manual operational work for the security team
- Participate in security incident response (on‑call rotation or escalation), including investigation, containment, root cause analysis, and long‑term fixes
- Contribute to security documentation and standards, ensuring we have clear, actionable guidance for engineers on topics like authentication, authorization, data encryption, and key management
- Support audits and assessments (e.g., SOC 2, customer security questionnaires) by providing technical details and evidence of control design and effectiveness
- Mentor other engineers on secure design and implementation practices through pairing, reviews, training sessions, and written guidance
Our take
As eCommerce sales are growing, so - unfortunately - is payment fraud. In a landscape where over 80% of first-time shoppers with smaller merchants are concerned about data security, retailers have to find ways to earn trust.
Sift is one company that sets out to prevent digital fraud by verifying customer identities and payment methods. It gives its clients, that include Twitter, McDonalds, Harry’s, DoorDash and Poshmark, the ability to confidently gain trust from their customers.
Worldwide, Sift serves tens of thousands of websites and apps. Building on its growth and successful fundraising efforts, the company acquired longtime partner Chargeback, and has now made a partnership with payabl to bring AI-driven fraud prevention to European merchants.
Steph
Company Specialist at Welcome to the Jungle
Insights
-2% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Apr 2021
$50m
SERIES E
Mar 2018
$53m
SERIES D
Total funding: $156.8m
Company benefits
- Competitive total compensation package
- 401k plan
- Medical, dental and vision coverage
- Wellness reimbursement
- Education reimbursement
- Flexible time off
Company HQ
Financial District, San Francisco, CA
Leadership
Jason Tan
(Executive Chair & Founder)Having studied at the University of Washington, Jason spent almost 3 years as a Zillow Software Design Engineer, before joining Optify and working as CTO of BuzzLabs for a year. They founded Sift in June 2011, serving initially as CEO and since January 2021 as Executive Chairman.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Sift