Senior Security Engineer

Sigma; San Francisco (CA); On-site; USD 175,000 - 220,000; Full time

Benefits offered by this job

Equity

Generous health benefits

Flexible time off policy

Paid bonding time for new parents

Traditional and Roth 401(k)

Commuter and FSA benefits

Lunch Program

Dog friendly office

Job summary

Sigma is seeking a Senior Security Engineer in San Francisco who excels in building security capabilities from the ground up. The successful candidate will work on developing and maintaining security platforms, focusing heavily on AI security and automation.

This position requires at least 5 years of relevant experience, strong proficiency in software engineering, and knowledge of cloud security. Full-time employees will enjoy generous health benefits and stock options.

Qualifications

• 5+ years of hands-on experience in Security Engineering or related cybersecurity roles.
• Strong software engineering mindset with experience building production-grade tools.
• Hands-on experience securing AWS, Azure, or GCP environments.

Responsibilities

• Design, build, and maintain security platforms and services.
• Develop solutions for cloud vulnerability management and security operations.
• Partner with product teams to enable AI innovation securely.

Skills

Security Engineering

Cloud Security

Python

AI Security

Networking

Education

Bachelor or Masters in Computer Science or Cyber Security

Tools

SIEM

AWS

Azure

GCP

Job description

About The Role

We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations.

What You’ll Do

Security Engineering

• Design, build, and maintain security platforms, services, APIs, automation, and internal tooling.
• Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations.
• Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure.
• Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead.

AI & LLM Security

• Design and implement security controls for AI applications, LLM‑powered services, agents, and AI development workflows.
• Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interactions.
• Develop monitoring, detection, and response capabilities for AI systems and AI‑generated content.
• Partner with product and engineering teams to securely enable AI innovation across the organization.

Identity & SaaS Security

• Build and maintain detections-as-code across cloud, identity, endpoint, SaaS, and application environments.
• Design and implement security controls across SaaS platforms, workforce identities, privileged access, and machine identities.
• Partner with engineering teams to implement secure‑by‑design architectures and security best practices.
• Perform architecture reviews and threat modeling for cloud services, AI‑enabled applications, APIs, and infrastructure changes.

Security Innovation & Automation

• Continuously identify opportunities to leverage AI, automation, and modern engineering practices to solve security challenges.
• Develop custom security tools, dashboards, APIs, services, and integrations.
• Evaluate emerging technologies and drive adoption where they provide measurable security and operational value.

Required Qualifications

• 5+ years of hands‑on experience in Security Engineering, or related cybersecurity roles.
• Bachelor or Masters in Computer Science, Cyber Security or related fields.
• Strong software engineering mindset with demonstrated experience building production‑grade tools, automation, and security platforms.
• Proven ability to build versus buy whenever practical and create scalable internal solutions.
• Strong proficiency in Python or similar languages, with experience building tools, using open source, APIs, automation, and cloud‑native services.
• Strong understanding of cloud architecture, identity systems, networking, operating systems, and modern security principles.
• Experience leveraging AI to transform security operations and engineering workflows.
• Hands‑on experience securing AWS, Azure, or GCP environments.
• Experience with SIEM, EDR, WAF, Network Security, Cloud security, SaaS security, IAM, and Security monitoring technologies.
• Strong analytical, communication, and problem‑solving skills.

Preferred Qualifications

• Experience building internal security products, platforms, and developer‑focused security tooling.
• Strong understanding of AI/LLM technologies, AI security risks, and secure AI development practices.
• Knowledge of Zero Trust, modern identity architectures, and cloud‑native security controls.
• CISSP, CCSP, GCIH, GCFA, or equivalent certifications.

Additional Job Details

The base salary range for this position is $175k - $220k annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies, and experience. Base pay is one part of the total package that is provided to compensate and recognize employees for their work at Sigma. This role is eligible for stock options, as well as a comprehensive benefits package.

Benefits for Our Full‑Time Employees

• Equity
• Generous health benefits
• Flexible time off policy. Take the time off you need!
• Paid bonding time for all new parents
• Traditional and Roth 401(k)
• Commuter and FSA benefits
• Lunch Program
• Dog friendly office

Equal Opportunity Employer

Sigma is an equal‑opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran or any other protected status. We look forward to learning how your experience can enable all of us to grow.

Note on Work Environment

We have an in‑office work environment in all our offices in SF, NYC, London and Sydney.

Privacy Practices

When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma’s Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to the USA, the UK, and Canada, Australia).

Sigma’s use of AI

This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision‑making.