Senior Security Engineer – Cloud & Data Security

Sigma Computing; New York (NY); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Equity

Generous health benefits

Flexible time off policy

Paid bonding time for all new parents

Traditional and Roth 401k

Commuter and FSA benefits

Lunch Program

Dog friendly office

Job summary

Sigma is seeking a Senior Security Engineer to advance our Cloud/SaaS security strategy and IAM practices in a fast-moving SaaS environment. You will lead security architecture, automate detection, and promote secure-by-default patterns across multi-cloud deployments.

The role emphasizes hands-on engineering, strategic security program development, and cross-functional collaboration with DevOps and Engineering teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (Masters preferred).
• 6+ years in Cloud Security, Data Security or IAM in SaaS/large-scale environments.
• Strong scripting for automation and security tooling development.

Responsibilities

• Embed security into development workflows and promote secure-by-default patterns.
• Design and improve Sigma Cloud Security across AWS, GCP, Azure.
• Model cloud threats and assess security risks for projects and SaaS platforms.
• Implement IAM best practices including zero trust and privileged access controls.

Skills

Cloud security

IAM

Security engineering

Scripting (Python, Go)

Cloud platforms

Education

Bachelor’s degree in CS/IS

Masters in Cyber Security (a plus)

Tools

Wiz

Cloudflare

Netskope

Job description

About the Role

Sigma is seeking a Senior Security Engineer to join our growing Cyber Security team. As a Senior Security Engineer, you will advance Sigma’s Security strategy by shaping and evolving security architecture in alignment with business objectives. As a Senior Engineer, you will be focused on our Cloud/SaaS Security, Identity Access & Management, Cloud Data Security, & AI Enablement. This role requires a blend of hands-on technical expertise, strategic program development, and strong cross-functional collaboration.

We are looking for a builder and defender - someone who thrives in complex cloud-native environments, embraces automation ("let the robots do the work"), and has the strong vision to scale cloud security and for a fast-moving SaaS company. If you are passionate about staying ahead of attackers, and building innovative security technologies, we want to hear from you.

What You’ll Do

• Partner with infrastructure and engineering teams to embed security into development workflows and promote secure-by-default patterns
• Design, implement, and continuously improve Sigma Cloud Security in all environments - AWS, GCP, Azure.
• Conduct cloud threat modeling and security risk assessments for new projects, integrations, and SaaS platforms.
• Develop and enforce identity and access management (IAM) best practices, including zero trust models and privileged access controls across IaaS and SaaS environments
• Deploy and manage cloud-native security services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, container security)
• Review and apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments.
• Engineer and support solutions for data security, encryption, key management, and secrets management.
• Build infrastructure-as-code (IaC) security controls using Terraform, CloudFormation, or similar tools.
• Partner with DevOps/Engineering to embed DevSecOps practices into CI/CD pipelines and application development.
• Proactively identify and remediate misconfigurations and vulnerabilities across cloud workloads.
• Develop sophisticated signature and rules for Cloud security and Automate detection and response workflows for cloud security incidents.
• Use AI securely and effectively to make the team efficient and scale security practices.
• Stay ahead of evolving threats - leverage intelligence, attack simulation, and red/blue team learnings to refine defenses.

What We’re Looking For

• Bachelor’s degree in Computer Science, Information Security, or a related field . Masters in Cyber Security is a plus.
• Bachelor’s or Master Degree in Computer Science, Cyber Security or related fields.
• Deep expertise in AWS, GCP, or Azure security services and architectures.
• Proven ability to produce high-quality results in a fast-paced SaaS environment or similar large scale environment.
• 6+ years of hands-on experience in fields like Cloud Security, Data Security and IAM
• Advanced understanding of Security Engineering in SaaS and AI-driven environments.
• Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development.
• Strong understanding with container security, orchestration security, and authentication/authorization.
• Hands-on experience with Kubernetes, containers, and serverless security.
• Deep Hands-on knowledge on security platforms like Wiz, Cloudflare,Netskope.
• Relevant certifications such as CISSP, CCSP, or AWS Security Specialty.

Why Sigma?

At Sigma, security is at the core of our mission. We power insights and innovation for our customers, and protecting their data is our highest priority. As a Senior Security Engineer, you will have the autonomy to shape our Cyber Security strategy, access to cutting-edge technologies, and the opportunity to solve real problems at scale.

Join us and be part of a security team that values collaboration, innovation, and resilience—while giving you the room to grow, lead, and leave your mark on Sigma’s security journey.

About us:

Sigma is the AI Apps and agentic analytics platform built on the cloud data warehouse. Business and technical teams use Sigma to explore live data, build intelligent applications, and automate critical workflows all without moving data or breaking governance. Sigma supports a spreadsheet interface, SQL, Python, and native AI in a single governed workspace, giving every team the speed to act and IT the control to scale. Sigma is trusted by more than 2,000 customers, including AMD, Duolingo, Colgate-Palmolive, and JPMorgan Chase.

Sigma announced its $80M in Series E financing in May 2026. The round was led by Princeville Capital, with new strategic investors Databricks Ventures, ServiceNow Ventures, and Workday Ventures participating alongside returning investors Altimeter Capital, Avenir Growth Capital, D1 Capital Partners, K5 Global, NewView Capital, Spark Capital, Sutter Hill Ventures, and XN. This milestone follows Sigma reaching $200M in annual recurring revenue in April 2026, with more than 100% year-over-year growth and 1.1 million new active users added in the latest fiscal year.

Come join us!

Benefits For Our Full-Time Employees:

• Equity
• Generous health benefits
• Flexible time off policy. Take the time off you need!
• Paid bonding time for all new parents
• Traditional and Roth 401k
• Commuter and FSA benefits
• Lunch Program
• Dog friendly office

Sigma is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran, or any other protected status. We look forward to learning how your experience can enable all of us to grow.

_ Note: We have an in-office work environment in all our offices in SF, NYC, London and Sydney._

Our Privacy Practices

When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma’s Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to the USA, the UK, and Canada, Australia).

Sigma’s use of AI

This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.