Principal SaaS Security Platform Engineer

Western Alliance Bancorporation; Phoenix (AZ); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Competitive salaries

Ownership stake in the company

Medical and dental insurance

Time off

401k matching program

Tuition assistance program

Employee volunteer program

Wellness program

Job summary

Western Alliance Bancorporation is seeking a Principal Security Platform Engineer to own end-to-end onboarding, configuration, and operations of new SaaS security platforms such as SSPM and ASM. You will design baseline policies, integrate with SIEM, SOAR, ServiceNow, and IAM, and collaborate with BISO and 2LOD to meet regulatory and enterprise standards.

The role requires 8+ years in information security, cloud/SaaS expertise, and strong scripting with Python or PowerShell; experience with AWS,

Qualifications

• Bachelor's degree in computer science, information security, IT, or related field (or equivalent experience).
• 8+ years of progressive experience in information security engineering with a focus on cloud/SaaS security, posture management, or attack surface management.
• Strong working knowledge of AWS, Azure, and Entra security models; Microsoft 365, Workday, Salesforce, and ServiceNow security configurations a plus.
• Proficiency with APIs, Python (or PowerShell) scripting, and integration patterns (REST, webhooks, eventdriven).
• Experience integrating security tooling with SIEM/SOAR, ServiceNow, and IAM platforms (SailPoint/Entra preferred).
• Advanced to expert knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards, and practices.
• Advanced to expert experience in leading cross-functional teams and managing multiple projects simultaneously with ability to walk-through top-level process design.

Responsibilities

• Provide SME expertise in security engineering and adjacent domains to ensure safe, secure, compliant, and reliable solutions.
• Own end-to-end onboarding, configuration, integration, and ongoing operations of 2-3 new SaaS platforms supporting the CISO Office.
• Design baseline policies, detection rules, posture benchmarks, and attacksurface reduction configurations across connected SaaS apps.
• Build and maintain API/event-driven integrations between SSPM/ASM and SIEM, SOAR, ServiceNow, CMDB, and IAM.
• Review technical plans to ensure security, scalability, and alignment with business objectives.
• Monitor platform health, manage upgrades/patches, tune alerting, and own vendor escalations.
• Track remediation of SaaS misconfigurations and exposed assets in partnership with app owners.
• Collaborate with Infrastructure, IAM, Endpoint Engineering, SOC, GRC, and BISO to align controls with enterprise standards.

Skills

Cloud security

Posture management

Attack surface

SaaS security

APIs

Python

PowerShell

REST

SIEM/SOAR

ServiceNow

IAM

Leadership

Regulatory knowledge

Education

Bachelor's degree in CS/InfoSec/IT

Tools

SailPoint

Entra

SSPM

ASM

Microsoft 365

Workday

Salesforce

ServiceNow

Job description

Western Alliance Bancorporation is seeking a Principal Security Platform Engineer to own end-to-end onboarding, configuration, and operations of new SaaS security platforms such as SSPM and ASM. You will design baseline policies, integrate with SIEM, SOAR, ServiceNow, and IAM, and collaborate with BISO and 2LOD to meet regulatory and enterprise standards.

The role requires 8+ years in information security, cloud/SaaS expertise, and strong scripting with Python or PowerShell; experience with AWS,