About the Role

Sigma is seeking a Senior Security Engineer- Detection & Response (Threat-Informed Defense) to join our Security Engineering team.You will act as the technical SME for threat Intelligence, detection and response, partnering across Security, Platform, Product, and Engineering to reduce risk and improve resilience at scale. You will bridge the gap between Cyber Threat Intelligence (CTI) and actionable defense, shaping our security architecture to withstand modern adversary tactics before they manifest in our environment. 

In this role you will not just administer the platforms.  You'll write production-grade code, engineer scalable detections, automate response, and develop proactive threat controls using deep knowledge of cloud, identity, application, and data attack paths.

What You’ll Do

• Adversary Response Planning: Develop and maintain a comprehensive adversary response strategy, mapping organizational risks to specific threat actor TTPs (Tactics, Techniques, and Procedures).
• Cross-Functional Leadership: Act as a Subject Matter Expert to Infrastructure, Engineering, and security teams. Guide these partners in implementing proactive security controls, ensuring that security is "baked in" to the development lifecycle and corporate infrastructure.
• Proactive Threat Modeling: Lead and build collaborative threat modeling sessions for new products and infrastructure, helping cloud platform, Engineering and IT identify and neutralize architectural weaknesses before deployment.
• Continuous Detection Engineering: Build, tune, and constantly update a library of high-fidelity detections. You will ensure our alerting logic evolves in lockstep with new exploitation techniques and industry benchmarks.
• Industry Alignment: Monitor the evolving security landscape (e.g., CISA advisories, new MITRE techniques) to ensure Sigma remains at the forefront of industry-standard security controls.
• Resilience Testing & Training: Design and lead cross-functional Incident Response simulations and tabletop exercises. Use these sessions to educate non-security teams on their roles during a crisis and to identify gaps in our defense-in-depth strategy.
• Advanced Incident Management: Lead the full lifecycle of high-severity security incidents, acting as the primary SME for containment and eradication while managing communication with executive leadership.
• Automation & Orchestration: Architect SOAR workflows to ensure common adversary techniques are met with immediate, automated remediation, reducing the manual burden on IT and Ops.

What We’re Looking For

• Minimum 7+ years in security with at least 5+ years deeply focused on detection engineering, incident response, or threat hunting in cloud-native environments and a track record of working in fast paced SaaS environments,moving organizations from reactive IR to threat-informed defense.
• Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related field.
• Hands-on proficiency in securing AWS/GCP/Azure + modern Identity Stack, including experience with Kubernetes security and Terraform/IaC.
• Strong coding ability to build automations, security pipeline, detection as code etc.
• Deep understanding of cloud IAM attack paths, token/session abuse, API threats, and data exfiltration patterns, CI/CD for detections
• Experience designing and operating telemetry pipelines (normalization, correlation, data quality, schema strategy).
• Strong incident response leadership for high-severity events in production environments.
• Deep familiarity with threat intelligence frameworks (MITRE ATT&CK) and the ability to convert raw intel into actionable detection/prevention strategies.
• Proven experience running incident response tests, breach and attack simulations (BAS), or red/blue team exercises.
• Deep expertise in security tooling across SIEM, EDR, CNAPP, WAF, CASB, and Data Security platforms and judgment to know when to buy vs build.
• The ability to translate complex technical threats into clear, actionable guidance for both technical peers and executive leadership.
• Relevant certifications (nice-to-have): GCIA, GCIH, GCTI, CISSP, CCSP.
• Contributions to open-source security projects or published research (nice-to have)

Why Sigma?

At Sigma, security is at the core of our mission. We power insights and innovation for our customers, and protecting their data is our highest priority. As a Senior Security Engineer, you will have the autonomy to shape our Cyber Security strategy, access to cutting-edge technologies, and the opportunity to solve real problems at scale.

Join us and be part of a security team that values collaboration, innovation, and resilience—while giving you the room to grow, lead, and leave your mark on Sigma’s security journey.

Additional Job details

The base salary range for this position is $210k - $240k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.

About the Role

We are hiring a Senior, hands-on Cloud Security Engineer to secure a large-scale, cloud-native SaaS platform. This is an engineering-first role for someone who builds security solutions—not just manages tools.

You will be a SME for  cloud security architecture across platform, IAM, network, workload, data, and AI enablement, and partner with Engineering, Security, and Product to implement scalable controls that support business growth. You’ll design secure architectures, embed controls into infrastructure-as-code, and build automated guardrails so teams can move fast without waiting on manual security approvals.

We’re looking for a builder-defender who thrives in complex cloud environments, automates aggressively (“let the robots do the work”), and can scale cloud security for a fast-moving SaaS company.

What You’ll Do

• Architectural Leadership: Partner deeply with infrastructure and engineering teams to embed security into development workflows, leading high-level technical discussions to guide security efforts and strategic priorities.
• Multi-Cloud Engineering: Design, implement, and continuously improve Sigma Cloud Security across AWS, GCP, and Azure environments with architect-level technical depth.
• Threat Modeling & IR: Conduct cloud threat modeling and demonstrate hands-on experience in Cloud Incident Response, including investigating and remediating malicious activity within cloud environments.
• Identity & Access: Build IAM and privileged access strategy (RBAC/ABAC, federation, least privilege, cross-account access), eliminating standing privilege and long-lived credentials. Develop and enforce IAM best practices, including zero-trust models and privileged access controls across IaaS and SaaS.
• Drive cloud data security controls including classification, encryption/KMS, masking/tokenization, access governance, retention/deletion, and exfiltration risk reduction across APIs and data pipelines.
• Develop automated remediation workflows for recurring cloud misconfigurations, drift, and policy violations to reduce manual effort and response time.
• Security Stack Management: Deploy and manage cloud-native services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, and container security).
• Network Defense: Review and apply zero-trust principles through strict network segmentation, authentication, and authorization.
• Automation: Develop sophisticated signatures/rules for cloud security and automate detection and response workflows.
• AI : Use AI securely and effectively to scale security practices and improve team efficiency.
• Continuous Evolution: Stay ahead of threats by leveraging intelligence, attack simulation, and red/blue team learnings.

What We’re Looking For

• Minimum 7+ years in Security roles with at least 5+ years focused on Cloud security engineering,IAM, and Data security
• Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related field.
• Deep technical expertise in cloud architectures AWS/Azure/GCP; including IAM, networking (VPCs, security groups, PrivateLink), and native security services is strongly desired.
• Strong infrastructure-as-code skills—you write Terraform professionally, not just read it.
• Advanced understanding and experience with container security, Kubernetes, and secure CI/CD pipeline design
• Proven ability to demonstrate incident response experience specifically related to cloud-based malicious activity and breach remediation.
• Advanced Cloud IAM expertise: federation, SSO, PAM/JIT access, service identities, and least privilege design.
• Strong background in cloud network security (segmentation, private connectivity, egress controls, WAF).
• Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development.
• Strong knowledge of security platforms such as CNAPP (Wiz), WAF (Cloudflare), SASE (Netskope)
• Demonstrated ability to lead cloud/saas architecture reviews and influence senior engineering stakeholders.
• Experience securing data platforms (nice to have) - Snowflake, Databricks, BigQuery etc.
• Experience in high-growth SaaS or data platforms Organizations (nice-to have)
• Prior experience in Platform Engineering, DevSecops or similar (nice-to have)
• Certifications (Preferred): Professional-level cloud certifications are required, such as:
• AWS: Certified Security – Specialty or Solutions Architect – Professional.
• GCP: Professional Cloud Security Engineer or Professional Cloud Architect.
• Azure: AZ-500 (Security Technologies) or AZ-305 (Solutions Architect).

Why Sigma?

At Sigma, security is at the core of our mission. We power insights and innovation for our customers, and protecting their data is our highest priority. As a Senior Security Engineer, you will have the autonomy to shape our Security Engineering strategy, access to cutting-edge technologies, and the opportunity to solve real problems at scale.

Join us and be part of a security team that values collaboration, innovation, and resilience—while giving you the room to grow, lead, and leave your mark on Sigma’s security journey.

Additional Job details

The base salary range for this position is $210k - $240k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.