Software Engineer, Security Infrastructure

Sift seeks a Security Infrastructure Engineer to build secure-by-default systems across distributed platform. Responsibilities include threat modeling, secure design, software supply chain security (dependency integrity, artifact signing), developer-facing security tooling in CI/CD (SAST, SCA, secret scanning, fuzzing), and raising security fluency across teams. The role requires expertise in Go and Rust, application security fundamentals, and a bias toward shipping scalable solutions.

5+ years production software experience with security ownership; fluency in Go and/or Rust; strong application security fundamentals (web/API vulnerabilities, auth patterns, cryptography); threat modeling experience; hands-on CI/CD security tooling (SAST, SCA, secret scanning); communication skills. Bonus: on-premise security, supply chain tooling (Sigstore, SLSA, SBOM), Rust memory-safety, container security, DAST, regulated environments.