SaaS Security Posture Management Engineer

Job Description
The mandatory skills are as below.
The SaaS Security Posture Management (SSPM) Engineer is responsible for designing, implementing, and operating SaaS security controls and posture management capabilities across the enterprise SaaS ecosystem. This role combines SaaS security engineering, cloud security, automation, and governance to continuously identify, assess, and remediate security risks within SaaS platforms while supporting secure adoption of cloud and AI-enabled services.
SaaS Security Engineering
•Deploy, configure, and operate SSPM platforms to continuously monitor SaaS security posture.
•Assess SaaS applications for configuration drift, identity risks, excessive permissions, data exposure, and third-party application risks.
•Establish and maintain SaaS security baselines and remediation workflows.
•Support SaaS onboarding, certification, and governance processes.
•Build automation workflows and integrations between SSPM platforms, IAM, SIEM, ticketing, and governance systems.
•Develop dashboards, reporting, and metrics to provide visibility into SaaS security posture and compliance.
•Leverage APIs, scripting, and Infrastructure-as-Code to improve operational efficiency and security automation.
Attaching the JD again for reference.




Role -   SaaS Security Posture Management Engineer
Experience Required - 5+ Years

Must Have Technical/Functional Skills

Skills and Expertise:
·         5+ years of experience in cybersecurity, data security, or data engineering with strong focus on data discovery, classification, or SSPM
·         Strong expertise in:
o   Modern data architectures (data lakes, warehouses, distributed systems)
o   Structured and unstructured data ecosystems
o   Data classification methodologies and regulatory frameworks (PCI, PII)
·         Demonstrated experience designing and implementing enterprise-scale integrations, including:
o   Data catalog platforms
o   ITAM / CMDB systems
o   SIEM / SOAR or security analytics platforms
·         Strong technical skills in:
o   APIs and integration patterns (REST, event-driven architectures)
o   Programming/scripting (Python preferred)
o   Cloud platforms (AWS, Azure, or Google Cloud Platform)


Roles & Responsibilities

The contractors will function as operations and engineering resources within the Data Security Posture Management (DSPM) team, supporting the implementation and day-to-day management of data security controls across the enterprise. Their primary responsibilities will include working with IGDC/1touch for on-premises environments and Cortex for cloud platforms to onboard data sources, maintain integrations, and ensure effective data discovery, classification, and policy enforcement. They will collaborate closely with internal team members, infrastructure teams, and vendor partners to troubleshoot issues, optimize configurations, and ensure stable and secure operations aligned with enterprise standards.
In addition, the contractors will support ongoing DSPM operations by monitoring system health, resolving incidents, and driving continuous improvements in tool performance and coverage. They will assist in coordinating with cross-functional teams to implement enhancements, manage updates, and address data security risks identified through DSPM tooling. The role also includes contributing to operational documentation, reporting, and metrics, as well as providing engineering support for scaling DSPM capabilities across both on-premises and cloud environments while ensuring alignment with organizational security and compliance objectives.

Generic Managerial Skills, If any
o   Data catalog platforms
o   ITAM / CMDB systems
o   SIEM / SOAR or security analytics platforms