Senior Security Engineer - Cloud & Data Security

About the Role Sigma is seeking a Senior Security Engineer to join our growing Cyber Security team. As a Senior Security Engineer, you will advance Sigma’s Security strategy by shaping and evolving security architecture in alignment with business objectives. As a Senior Engineer, you will be focused on our Cloud/SaaS Security, Identity Access & Management, Cloud Data Security, & AI Enablement. This role requires a blend of hands‑on technical expertise, strategic program development, and strong cross‑functional collaboration. We are looking for a builder and defender—someone who thrives in complex cloud-native environments, embraces automation (“let the robots do the work”), and has the strong vision to scale cloud security and for a fast-moving SaaS company. If you are passionate about staying ahead of attackers, and building innovative security technologies, we want to hear from you. What You’ll Do Partner with infrastructure and engineering teams to embed security into development workflows and promote secure‑by‑default patterns Design, implement, and continuously improve Sigma Cloud Security in all environments - AWS, GCP, Azure. Conduct cloud threat modeling and security risk assessments for new projects, integrations, and SaaS platforms. Develop and enforce identity and access management (IAM) best practices, including zero trust models and privileged access controls across IaaS and SaaS environments Deploy and manage cloud-native security services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, container security) Review and apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments. Engineer and support solutions for data security, encryption, key management, and secrets management. Build infrastructure-as-code (IaC) security controls using Terraform, CloudFormation, or similar tools. Partner with DevOps/Engineering to embed DevSecOps practices into CI/CD pipelines and application development. Proactively identify and remediate misconfigurations and vulnerabilities across cloud workloads. Develop sophisticated signature and rules for Cloud security and Automate detection and response workflows for cloud security incidents. Use AI securely and effectively to make the team efficient and scale security practices. Stay ahead of evolving threats – leverage intelligence, attack simulation, and red/blue team learnings to refine defenses. What We’re Looking For Bachelor's degree in Computer Science, Information Security, or a related field . Masters in Cyber Security is a plus. Bachelor’s or Master Degree in Computer Science, Cyber Security or related fields. Deep expertise in AWS, GCP, or Azure security services and architectures. Proven ability to produce high-quality results in a fast‑paced SaaS environment or similar large scale environment. 6+ years of hands‑on experience in fields like Cloud Security, Data Security and IAM Advanced understanding of Security Engineering in SaaS and AI‑driven environments. Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development. Strong understanding with container security, orchestration security, and authentication/authorization. Hands‑on experience with Kubernetes, containers, and serverless security. Deep Hands‑on knowledge on security platforms like Wiz, Cloudflare, Netskope. Relevant certifications such as CISSP, CCSP, or AWS Security Specialty. Benefits For Our Full‑Time Employees Equity Generous health benefits Flexible time off policy. Take the time off you need! Paid bonding time for all new parents Traditional and Roth 401k Commuter and FSA benefits Lunch Program Dog friendly office Note: We have an in‑office work environment in all our offices in SF, NYC, London and Sydney. Sigma is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran, or any other protected status. We look forward to learning how your experience can enable all of us to grow. #J-18808-Ljbffr Role, Inc.