Founding Security Engineer – Governance, Risk & Compliance (GRC) - Remote

Overview

As Sift’s founding Security & Compliance Engineer, you will define the posture, architecture, and practices that keep our products and infrastructure secure in the most demanding environments.

In Short

• Build secure CI/CD pipelines with embedded scanning.
• Operate and tune SIEM/EDR (ELK, Datadog, Splunk, CrowdStrike, Prometheus, Grafana).
• Secure multi-cloud environments (AWS GovCloud, Kubernetes, on-prem).
• Implement zero-trust networking and modern SASE/ZTNA approaches.
• Lead compliance initiatives: SOC 2, ISO 27001, NIST 800-171, FedRAMP, CMMC.
• Manage third-party/vendor risk assessments.
• Own internal/external audits and readiness for customer/government reviews.
• Lead company-wide security awareness initiatives.
• 5+ years in cybersecurity, product security, or cloud security roles.
• Hands-on experience securing AWS or equivalent cloud services.

Requirements

• Proven track record leading compliance initiatives such as SOC 2, NIST 800-171, CMMC, FedRAMP, or ISO 27001.
• Deep understanding of network, endpoint, and identity security principles.
• Experience with security tooling and integration into operational workflows.
• Ability to translate compliance requirements into actionable engineering work.
• Experience managing third-party/vendor risk.
• Clear communicator with technical and non-technical stakeholders.
• Collaborative partner to infra and product teams.
• High ownership and adaptability in fast-moving environments.
• Integrity and trustworthiness in handling sensitive data.
• Excited to build and lead a security function over time.

Benefits

• Competitive salary range of $170,000 - $220,000 per year.
• Equity and benefits included.
• Opportunity to lay the foundation of a security program.
• High-visibility, high-ownership role.
• Collaboration with a team of experienced engineers.
• Flexible remote work options.
• Professional growth and development opportunities.
• Engagement in a mission-critical environment.
• Work with a team from SpaceX, Google, and Palantir.
• In-person collaboration twice a week.