Senior Product Security Engineer - SF

Senior Product Security Engineer - SF

As a Product Security Lead at Sigma, you will play a crucial role in ensuring the security of our data analytics products. You will lead the effort to embed security into the product development lifecycle, working closely with engineering, product management, and other cross-functional teams. Your primary goal will be to identify and mitigate security risks, establish robust security practices, and ensure compliance with relevant security standards and regulations. You will be encouraged to write blogs, speak and join security events to talk about the work you are doing and how other companies can utilize it to better analyze their security data. Beyond enabling Security first culture, you will also be pushed to solve security problems through automation ("let the robots do the work") and become a leader in this space.If you're a builder that enjoys working with cutting edge technologies, we'd love to hear from you!

You will

• Lead the development and implementation of a comprehensive product security strategy.

• Collaborate with engineering and product teams to integrate security best practices into the software development lifecycle (SDLC).

• Perform threat modeling / data flow diagramming / design risk analysis/ security assessments in partnership with business partners, providing guidance that balances security requirements with functional requirements.

• Promote and grow culture of security within product engineering teams & design, build and operate uniform scalable security policies and controls for our entire product surface

• Perform code reviews, Vulnerability Scanning and Penetration tests of enterprise applications, providing guidance on remediation steps, feature enhancements, and security requirements.

• Provide security training and awareness programs for engineering teams and build Security Champion Program including the relevant Engineering and Product members.

• Stay current with the latest security threats, trends, and technologies, and proactively recommend improvements to enhance product security.

• Enhance and automate security testing and enablements within the Sigma Product Security strategy.

• Lead security assessments and audits, including managing relationships with external security researchers.

• Lead incident response efforts related to product security incidents and breaches.

• Serve as the primary point of contact for product security-related inquiries and issues.

You are

• Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degree preferred.

• 7+ years of experience in Product security, with a proven track record in designing, implementing, and managing security programs for cloud-based platforms at Product companies.

• Expertise with secure software development practices, including threat modeling, code review, and familiarity with programming languages such as Python, Golang, Rust, Typescript or similar.

• Proficiency in security tools and technologies, such as static and dynamic analysis tools, penetration testing tools, and vulnerability scanners.

• Strong technical background in security architecture, cryptography, network security, and application security.

• Deep understanding of cloud computing technologies and security principles, particularly in AWS, Azure, or GCP environments.

• Excellent communication and collaboration skills, with the ability to effectively engage.

• Experience in building security strategy for Cloud Data Analytics, Data Warehouses or similar products is a plus.

• Relevant Security Certifications like CISSP,OSCP or similar is a plus.

Additional Job details

The base salary range for this position is $200k - $245k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.

About us:

Sigma is the only cloud analytics and business intelligence tool empowering business teams to break free from the confines of the dashboard, explore data for themselves, and make better, faster decisions. The award-winning software was built to capitalize on the performance power of cloud data warehouses to combine data sources and analyze billions of rows of data instantly via an intuitive, spreadsheet-like interface - no coding required.

Since launching with its unique interface, Sigma Computing has added features such as collaboration tools and embedded analytics capabilities. The most recent product launch included a set of AI tools such as forecasting capabilities, an AI copilot and a notebook interface for users who prefer a code-first environment.

Sigma announced its $200M in Series D financing in May 2024, to continue transforming BI through its innovations in AI infrastructure, data application development, enterprise-wide collaboration, and business user adoption. Spark Capital and Avenir Growth Capital co-led the Series D funding round, with additional participation from a group of past investors including Snowflake Ventures and Sutter Hill Ventures.The Series D funding, raised at a valuation 60% higher than the company's Series C round three years ago, promises to further accelerate Sigma's growth.

Come join us!

Benefits For Our Full-Time Employees:

• Equity

• Generous health benefits

• Flexible time off policy. Take the time off you need!

• Paid bonding time for all new parents

• Traditional and Roth 401k

• Commuter and FSA benefits

• Lunch Program

• Dog friendly office

Sigma Computing is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We look forward to learning how your experience can enable all of us to grow.

Note: We have an in-office work environment in both our SF & NYC office.