SIFT
data infrastructure
SoftwareEngineer,DevSecOps
Neural analysis suggests this role is
optimal for Senior candidates.
“Software Engineer, DevSecOps at SIFT. Skills: Security engineering, Platform/DevSecOps, Cloud infrastructure, Security automation, Cloud-native environments, Infrastructure as Code, Containerized environments, CI/CD systems. Build and maintain tooling, scripts, services, and automation that assess, enforce, and monitor security and compliance controls across AWS cloud environments, Kubernetes clusters, and CI/CD pipelines. Develop lightweight internal solutions (e.g., policy-as-code, custom scan”
What You'll Achieve.
Define the security posture, architecture, and practices; Own SIFT’s security posture end-to-end; Set the standard for how we protect our systems and data; Ensuring resilience against modern threats; Make security and compliance automatic, auditable, and invisible; Secure-by-default becomes the path of least resistance; Reduce toil by automating security workflows, compliance validation, and remediation; Accelerate detection and recovery
Industry & Context.
Ability to quickly assess system state, identify meaningful gaps, and deliver pragmatic, high-impact solutions; Problem-solving skills with a builder mindset
U. S. Person Required: Must be a U. S. citizen, lawful permanent resident, or protected individual such as an asylee or refugee in compliance with ITAR (International Traffic in Arms Regulations) / EAR (Export Administration Regulations) regulations.
What They're Looking For.
Must Have
4–7+ years of hands-on experience in security engineering, platform/DevSecOps, or cloud infrastructure roles, Proven track record shipping production-grade security automation in cloud-native environments (AWS strongly preferred), Deep familiarity with implementing technical controls for SOC 2, FedRAMP, or similar frameworks in real production systems, Proficiency in scripting and automation (Python, Go, Bash, or similar), Hands-on experience with Infrastructure as Code (Terraform or equivalent), containerized environments (Kubernetes), and CI/CD systems, Working knowledge across core security domains: Access control, identity management, and least-privilege enforcement; Logging, monitoring, auditing, and security observability; Encryption, key management, and secrets handling; Vulnerability scanning, policy-as-code, and continuous compliance; Incident response and change management, Ability to quickly assess system state, identify meaningful gaps, and deliver pragmatic, high-impact solutions in a fast-moving environment, Comfort operating as a founding security engineer, Problem-solving skills with a builder mindset
Nice to Have
Founding or early-stage security builder experience strongly preferred, AWS strongly preferred, Bias toward building custom tooling over relying solely on off-the-shelf products
What You'll Do.
Build and maintain tooling
and automation that assess
and monitor security and compliance controls across AWS cloud environments
Develop lightweight internal solutions (e.g.
Embed security guardrails directly into infrastructure-as-code (Terraform)
container orchestration
and deployment workflows
Harden cloud-native systems
implement access controls
and vulnerability management at scale
Improve visibility into overall security posture through automated reporting
and real-time observability
Translate compliance requirements (SOC 2
and related frameworks) into pragmatic
enforceable technical implementations
Automate security workflows
compliance validation
Support incident response and post-incident improvements by building better observability and tooling
Conduct security reviews of new features
and infrastructure changes
How You'll Work.
Team & Collaboration
Partner closely with the infrastructure and platform engineering teams; Partnering with external compliance specialists; Providing clear guidance that helps teams design and implement secure solutions
Full Job Description
ABOUT SIFT SIFT is the data infrastructure platform for hardware engineering teams. SIFT turns high-frequency telemetry into engineering insights for mission-critical systems. Teams use Sift to build and operate rockets, satellites, autonomous vehicles, energy systems, defense platforms, and more. Founded by former SpaceX engineers who built the tools behind Dragon and Starlink, Sift is building the data infrastructure to herald the AI era for physical systems. About the Role As a Software Engineer, Security Infrastructure, you will not just maintain a security checklist; you will define the posture, architecture, and practices that keep our products and infrastructure secure in the most demanding environments. You will be both hands-on and strategic, building controls, automating compliance, and owning SIFT’s security posture end-to-end, with technical security engineering as the primary focus. You will set the standard for how we protect our systems and data, ensuring resilience against modern threats while partnering with external compliance specialists to meet the requirements of aerospace, defense, and enterprise sectors. In This Role, You’ll: - Build and maintain tooling, scripts, services, and automation that assess, enforce, and monitor security and compliance controls across our AWS cloud environments, Kubernetes clusters, and CI/CD pipelines. - Develop lightweight internal solutions (e.g., policy-as-code, custom scanners, CI/CD integrations) that make security and compliance automatic, auditable, and invisible to the rest of engineering. - Embed security guardrails directly into infrastructure-as-code (Terraform), container orchestration, and deployment workflows so that secure-by-default becomes the path of least resistance. - Partner closely with the infrastructure and platform engineering teams to harden cloud-native systems, implement access controls, encryption, logging/monitoring, and vulnerability management at scale. - Improve visibility into our o
Applying for this Software Engineer, DevSecOps role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Ashby
- Ashby is a fast modern ATS — most applications take under 3 minutes.
- The resume parser is strong; verify parsed experience dates and job titles.
- Custom screening questions are often scored algorithmically — answer completely.
- Location field affects geo-based screening; use your actual metro area.
ANONYMOUS · UNFILTERED
What do employees actually say about SIFT?
Real rants from real employees. Read before you apply.