Software Engineer, DevSecOps

requirements (SOC 2, FedRAMP, and related frameworks) into pragmatic, enforceable technical implementations rather than manual checklists. Reduce toil by automating security workflows, compliance validation, and remediation so engineering can ship fast without compromising security. Support incident response and post-incident improvements by building better observability and tooling that accelerates detection and recovery. Conduct security reviews of new features, services, and infrastructure changes, providing clear guidance that helps teams design and implement secure solutions. The Skillset You’ll Bring: Technical Skills 4–7+ years of hands-on experience in security engineering, platform/DevSecOps, or cloud infrastructure roles (founding or early-stage security builder experience strongly preferred). Proven track record shipping production-grade security automation in cloud-native environments (AWS strongly preferred) — not just documenting or managing compliance programs. Deep familiarity with implementing technical controls for SOC 2, FedRAMP, or similar frameworks in real production systems. Strong proficiency in scripting and automation (Python, Go, Bash, or similar) and a bias toward building custom tooling over relying solely on off-the-shelf products. Hands-on experience with Infrastructure as Code (Terraform or equivalent), containerized environments (Kubernetes), and CI/CD systems — and how to embed security directly into them. Working knowledge across core security domains: Access control, identity management, and least-privilege enforcement Logging, monitoring, auditing, and security observability Encryption, key management, and secrets handling Vulnerability scanning, policy-as-code, and continuous compliance Incident response and change management Ability to quickly assess system state, identify meaningful gaps, and deliver pragmatic, high-impact solutions in a fast-moving environment. Comfort operating as a founding security engineer: you thrive in ambiguity, own standards end-to-end, and focus on enabling velocity while raising the security bar. Strong problem-solving skills with a builder mindset — you enjoy making complex security

requirements disappear into clean, automated systems that engineering teams actually love to use. Location: SIFT’s headquarters is in Marina Del Rey, CA (Next to LAX). We collaborate in person twice a week—on Mondays and Thursdays —and come together for a full week every two months. We are open to relocating candidates to LA or working from our San Francisco office for the right candidate. Salary range: $170,000 - $220,000 per year. Plus equity and

benefits. Eligibility: U.S. Person Required : Must be a U.S. citizen, lawful permanent resident, or protected individual such as an asylee or refugee in compliance with ITAR (International Traffic in Arms Regulations) / EAR (Export Administration Regulations) regulations.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.