SaaS Security Engineer

Responsibilities:

• Review, assess, and secure SaaS applications based on industry best practices and frameworks (e.g., CIS, NIST).
• Integrate SaaS applications with centralized IAM solutions such as SSO and MFA (Okta, Azure AD).
• Monitor configurations, logs, and user activities using SSPM tools (e.g., AppOmni, Obsidian, Valence).
• Conduct SaaS vendor security reviews and due diligence for new and existing platforms.
• Implement and maintain security controls for access management, data sharing, and integrations.
• Respond to SaaS-related security incidents and perform root cause analysis (RCA).
• Collaborate with DevOps and application teams to embed SaaS security into CI/CD pipelines.
• Support audit and compliance initiatives by ensuring adherence to security standards.
• Provide guidance and training to internal teams on SaaS security best practices.

Required Qualifications:

• Bachelor s degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
• Experience with SaaS platforms such as Microsoft 365, Google Workspace, Salesforce, and ServiceNow.
• Strong knowledge of identity and access management (IAM), including SSO and MFA.
• Understanding of authentication and authorization protocols such as OAuth, SAML, SCIM, and API security.
• Familiarity with DLP, CASB, and SSPM technologies.
• Experience configuring SaaS audit logs and performing log analysis.
• Ability to create and maintain security runbooks and hardening documentation.

Preferred Qualifications:

• Experience with automation or scripting (Python, PowerShell).
• Familiarity with MITRE ATT&CK framework for SaaS environments.
• Knowledge of Zero Trust and Secure Access Service Edge (SASE) architectures.
• Experience with configuration management tools and compliance frameworks (SOC 2, ISO 27001).

Certifications:

• Required/Preferred: CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Okta Certified Professional or Administrator.
• Preferred: GIAC Cloud Security Automation (GCSA), CCSP, CISSP.

Skills And Competencies:

• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Ability to work in cross-functional teams and fast-paced environments.
• Attention to detail with a focus on security and compliance.
• Proactive mindset with continuous learning and improvement approach.