SaaS Security Lead: SSPM & Threat Defense

State Street; Berwyn (PA); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Senior Staff SaaS Security Engineer to lead deployment and operation of SSPM and SaaS threat monitoring across the enterprise SaaS ecosystem. You will partner with application and platform owners to onboard SaaS applications, implement security controls, and drive remediation to improve posture.

You will design integrations, telemetry, and automation workflows to enable continuous visibility into SaaS risks, while developing security standards and documenting procedures

Qualifications

• 8+ years of information security with SaaS or cloud focus.
• 5+ years with SSPM, CASB, or SaaS threat protection platforms.
• Experience in financial services or regulated industries preferred.
• Bachelor's degree or equivalent experience.

Responsibilities

• Lead deployment, integration, and operationalization of SSPM and SaaS threat monitoring across enterprise SaaS platforms.
• Onboard SaaS applications with security controls and remediation to improve posture.
• Design and maintain integrations, telemetry collection, and automation workflows for continuous visibility.
• Develop and maintain SaaS security standards, architecture docs, and procedures.
• Track and report SaaS security metrics, including coverage and remediation progress.

Skills

SSPM

CASB

SaaS security

SaaS threat protection

OAuth

SSO/SAML

Automation scripting

Education

Bachelor's degree in Computer Science or Information Security

Relevant cloud or information security certifications

Tools

Obsidian Security

Job description

State Street is seeking a Senior Staff SaaS Security Engineer to lead deployment and operation of SSPM and SaaS threat monitoring across the enterprise SaaS ecosystem. You will partner with application and platform owners to onboard SaaS applications, implement security controls, and drive remediation to improve posture.

You will design integrations, telemetry, and automation workflows to enable continuous visibility into SaaS risks, while developing security standards and documenting procedures