Senior Security Engineer
Sigma Computing · San Francisco, CA and New York, New York
About the role
A hands-on engineer on Sigma Computing's Security Engineering team who builds security capability for its cloud-native SaaS platform, favouring in-house engineering, automation and AI over off-the-shelf tools and working across several security domains rather than one.
The engineer builds security platforms, APIs and tooling for cloud vulnerability management, network security, detection, incident response and access governance; writes detections-as-code across cloud, identity, endpoint and SaaS; designs guardrails for LLM services and agents against prompt injection, data leakage and excessive permissions; secures workforce, privileged and machine identities; and runs threat modelling and architecture reviews. Sigma wants five or more years in security engineering, strong Python and a record of shipping production tools, hands-on cloud security, and experience with SIEM, EDR and IAM. The role is in the New York or San Francisco office four days a week.