Senior Security Engineer

Sigma Computing•San Francisco, CA

6h•$175,000 - $220,000•Onsite

About The Position

We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations. We are looking for engineers who enjoy solving security problems across multiple domains rather than specializing exclusively in a single area. You will join a highly technical Security Engineering team that values innovation, ownership, and building scalable security solutions. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale.

Requirements

5+ years of Hands-on experience in Security Engineering, or related cybersecurity roles.
Bachelor or Masters in Computer Science, Cyber Security or similar roles.
Strong software engineering mindset with demonstrated experience building production-grade tools, automation, and security platforms.
Proven ability to build versus buy whenever practical and create scalable internal solutions.
Strong proficiency in Python or similar languages, with experience building tools,using open source, APIs, automation, and cloud-native services
Strong understanding of cloud architecture, identity systems, networking, operating systems, and modern security principles.
Experience leveraging AI to transform security operations and engineering workflows.
Hands-on experience securing AWS, Azure, or GCP environments.
Experience with SIEM, EDR, WAF, Network Security, Cloud security, SaaS security, IAM, and Security monitoring technologies.
Strong analytical, communication, and problem-solving skills.

Nice To Haves

Experience building internal security products, platforms, and developer-focused security tooling.
Strong understanding of AI/LLM technologies, AI security risks, and secure AI development practices.
Knowledge of Zero Trust, modern identity architectures, and cloud-native security controls.
CISSP, CCSP, GCIH, GCFA, or equivalent certifications.

Responsibilities

Design, build, and maintain security platforms, services, APIs, automation, and internal tooling.
Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations.
Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure.
Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead.
Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows.
Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interactions.
Develop monitoring, detection, and response capabilities for AI systems and AI-generated content.
Partner with product and engineering teams to securely enable AI innovation across the organization.
Build and maintain detections-as-code across cloud, identity, endpoint, SaaS, and application environments.
Design and implement security controls across SaaS platforms, workforce identities, privileged access, and machine identities.
Partner with engineering teams to implement secure-by-design architectures and security best practices.
Perform architecture reviews and threat modeling for cloud services, AI-enabled applications, APIs, and infrastructure changes.
Continuously identify opportunities to leverage AI, automation, and modern engineering practices to solve security challenges.
Develop custom security tools, dashboards, APIs, services, and integrations.
Evaluate emerging technologies and drive adoption where they provide measurable security and operational value.