Senior Security Engineer – Cloud & Data Security

Sigma Computing • New York, NY

1d • Onsite

About The Position

Sigma is seeking a Senior Security Engineer to join our growing Cyber Security team. As a Senior Security Engineer, you will advance Sigma’s Security strategy by shaping and evolving security architecture in alignment with business objectives. As a Senior Engineer, you will be focused on our Cloud/SaaS Security, Identity Access & Management, Cloud Data Security, & AI Enablement. This role requires a blend of hands-on technical expertise, strategic program development, and strong cross-functional collaboration.
We are looking for a builder and defender—someone who thrives in complex cloud-native environments, embraces automation (“let the robots do the work”), and has the strong vision to scale cloud security and for a fast-moving SaaS company. If you are passionate about staying ahead of attackers, and building innovative security technologies, we want to hear from you.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field . Masters in Cyber Security is a plus.
• Bachelor’s or Master Degree in Computer Science, Cyber Security or related fields.
• Deep expertise in AWS, GCP, or Azure security services and architectures.
• Proven ability to produce high-quality results in a fast-paced SaaS environment or similar large scale environment.
• 6+ years of hands-on experience in fields like Cloud Security, Data Security and IAM
• Advanced understanding of Security Engineering in SaaS and AI-driven environments.
• Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development.
• Strong understanding with container security, orchestration security, and authentication/authorization.
• Hands-on experience with Kubernetes, containers, and serverless security.
• Deep Hands-on knowledge on security platforms like Wiz, Cloudflare,Netskope.
• Relevant certifications such as CISSP, CCSP, or AWS Security Specialty.

Responsibilities

• Partner with infrastructure and engineering teams to embed security into development workflows and promote secure-by-default patterns
• Design, implement, and continuously improve Sigma Cloud Security in all environments - AWS, GCP, Azure.
• Conduct cloud threat modeling and security risk assessments for new projects, integrations, and SaaS platforms.
• Develop and enforce identity and access management (IAM) best practices, including zero trust models and privileged access controls across IaaS and SaaS environments
• Deploy and manage cloud-native security services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, container security)
• Review and apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments.
• Engineer and support solutions for data security, encryption, key management, and secrets management.
• Build infrastructure-as-code (IaC) security controls using Terraform, CloudFormation, or similar tools.
• Partner with DevOps/Engineering to embed DevSecOps practices into CI/CD pipelines and application development.
• Proactively identify and remediate misconfigurations and vulnerabilities across cloud workloads.
• Develop sophisticated signature and rules for Cloud security and Automate detection and response workflows for cloud security incidents.
• Use AI securely and effectively to make the team efficient and scale security practices.
• Stay ahead of evolving threats – leverage intelligence, attack simulation, and red/blue team learnings to refine defenses.

Benefits

• Equity
• Generous health benefits
• Flexible time off policy. Take the time off you need!
• Paid bonding time for all new parents
• Traditional and Roth 401k
• Commuter and FSA benefits
• Lunch Program
• Dog friendly office

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees