Security Engineer - Sigma Computing

Security Engineer

As a Security Engineer at Sigma, You will lead initiatives to enhance our security posture, ensuring the protection of our cloud infrastructure, data, and assets. Additionally, in this role you will be a trusted security advisor and subject matter expert to our engineering teams. You will play a crucial role in proactively identifying, analyzing, and mitigating cyber threats, responding to and managing security incidents. The successful applicant will advance our Security Engineering, Vulnerability Management, Cloud and Network operations, identify and mitigate gaps within our security framework. Beyond enabling Security first culture, you will also be pushed to solve security problems through automation ("let the robots do the work")  and become a leader in this space.If you’re a builder that enjoys working with cutting edge technologies, we’d love to hear from you!

WHAT YOU WILL BE DOING

• Drive the growth and evolution of our threat detection initiatives, using innovative strategies to protect our cloud workloads, identities, and end-points.
• ​​Further develop and manage our vulnerability management program, identifying and assessing risks across our asset inventory to prioritize and guide remediation efforts effectively.
• Building and maintaining enhanced Network Security to protect Sigma application and cloud from External attackers.
• Ability to conduct IaaS and SaaS Security Architecture reviews and Threat Modelling.
• Mature Sigma’s investigation and response capabilities and ability to respond effectively to security events.
• Foster strong collaborative partnerships with Devops, Developers, and Engineers, that can ensure alignment with our security goals and enhance the proactive security culture within the organization.
• Building Cloud data security, and configuration management practices standards in the Cloud environment.
• Deploy detections, automations, and alerts using modern software engineering practices.
• Understand latest stack of Security tooling and frameworks to detect sophisticated attacker techniques and detect them across Sigma’s diverse environments and endpoints.
• Develop Threat Hunting, Network forensics and deploy sophisticated IR runbooks 
• Develop and spread Security awareness using Phishing campaigns, role based training and other Internal security sessions.

MINIMUM QUALIFICATIONS WE NEED

• 5+ years of strong hands-on experience in security engineering, system engineering, network engineering. 
• 3+ of those years of experience in Cloud Security, Vulnerability Management, incident response including host and cloud forensics, incident management, threat intelligence, threat hunting, and/or security detection.
• Prior experience working or building the SOC - triaging, escalating and managing incidents. Knowledge of Sigma rules is very essential.
• Security Tooling experience - DLP, Vulnerability Management, Malware Detection/ Analysis, SIEM, Privilege Access, DAST, WAF, IPS/IDS, Firewall, Email Security, CASB, URL Filtering, Container Security etc.
• Experience in AWS, GCP or Azure, Kubernetes, Terraform or other IAC
• Experience automating security detection and response using scripting or other means.
• Good to have - Experience in SDLC, Bug Bounty Program, Application Security and DevSecOps
• Knowledge of open source tools and an ability to leverage them will be a huge plus

Additional Job details

The base salary range for this position is $170k - $200k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.