Position: Security Analyst
Company: Sift
Experience required: 5y
English level: fluent

Required skills
- 5+ years of experience in security analysis
- 5+ years of experience in driving security initiatives
- Experience driving compliance programs (SOC2 Type 2, PCI-DSS, etc) to completion
- Experience with threat modeling and incident response.
- Experience with big data that contains PII
- Experience leading technical risk assessment and developing privacy & security engineering principles & practice.
- Experience implementing secure development lifecycle
- Strong technical understanding of security: network & OS, software (e.g. OWASP Top 10), cryptographic systems, key-management systems, hosted cloud environments (AWS), etc.
- Hand-on experience in an engineering role delivering & implementing security solutions
- Strong analytical and quantitative skills, with the ability to use data & metrics to backup recommendations.
- Strong verbal and written communication skills, for both technical and non-technical audience
- BS in Computer Science or related field

We offer
- Competitive total compensation package
- Medical, dental and vision coverage
- Wellness reimbursement
- Education reimbursement
- Flexible time off

Sift is an equal opportunity employer. We make better decisions as a business when we can harness diversity in our experience, data, and background. Sift is working toward building a team that represents the worldwide customers that we serve, inclusive of people from all walks of life who can bring their full selves to work every day.

Responsibilities

As a Security Analyst in Sift’s Security & Compliance team, you will be responsible for ensuring that Sift’s Trust Platform is deserving of and exceeding that trust from a technical perspective by continually improving Sift’s security posture.

What you’ll do
- Partner with members of the Security & Compliance team to define our security strategy and roadmap and align members with across Sift organization to deliver solutions to both internal and external customers
- Actively engage with the sales team, customers, and the community to understand the security scenarios and features that are relevant & critical to Sift the industry at large
- Develop business cases for project prioritization & investment based on risk profile of our customer’s data while balancing business needs vs. technical constraints
- Drive security related engineering work across multiple engineering teams.
- Engage with external partners & auditors to drive various compliance and auditing needs to successful completion
- Mentor engineers on relevant aspects of security
- Understand the implementation details in depth to prioritize & execute effectively on security initiatives
- Get your hands dirty and be able to directly implement security measures as necessary.

Project description

Sift is the leading innovator in Digital Trust & Safety. Hundreds of disruptive, forward-thinking companies like Airbnb, Zillow, and Twitter trust Sift to deliver outstanding customer experience while preventing fraud and abuse.

The Sift engine powers Digital Trust & Safety by helping companies stop fraud before it happens. But it’s not just another anti-fraud platform: Sift enables businesses to tailor experiences to each customer according to the risk they pose. That means fraudsters experience friction, but honest users do not. By drawing on insights from our global network of customers, Sift allows businesses to scale, win, and thrive in the digital era.

Our team bridge the gap between our platform providing machine learning at scale and our customers’ needs. We give our customers a seamless way to gain insights, make decisions, and navigate the ever-changing world of fraud-fighting. We provide customer-facing automated workflow tools running on highly-available services architecture. We’re also responsible for providing third-party extensibility points, giving our customers simple ways to use our product within their current workstreams. Together we provide the platform that makes high-volume streams of data understandable, actionable, and usable.