Senior SaaS Security Architect — Lead, Enterprise Protection

State Street; Boston (MA); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K match

Insurance coverage

Job summary

State Street is seeking a Senior Staff SaaS Security Engineer to lead deployment, integration, and operationalization of SaaS security platforms across the enterprise. You will partner with application owners and platform teams to onboard SaaS apps, implement controls via APIs, and drive remediation of identified risks.

The role requires strong knowledge of OAuth, OIDC, SAML/SSO, and modern SaaS security architectures, with hands-on experience in SSPM and CASB.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 8+ years of information security experience focusing on SaaS security, cloud security, identity security, or platform security.
• 5+ years hands-on with SSPM, CASB, SaaS threat protection, or related tech.

Responsibilities

• Lead deployment, integration, and operationalization of SSPM and SaaS threat protection.
• Onboard enterprise SaaS applications and drive remediation of risks via APIs and automation.
• Design SaaS security integrations and API telemetry collection for continuous visibility.
• Develop and maintain SaaS security standards, architecture docs, and procedures.
• Track and report SaaS security metrics including posture findings and remediation progress.

Skills

SSPM

CASB

SaaS security

Threat protection

OAuth

OIDC

SAML/SSO

APIs

Automation

Scripting

Education

Bachelor’s degree in Computer Science or related field

Equivalent practical experience

Tools

Obsidian Security

Job description

State Street is seeking a Senior Staff SaaS Security Engineer to lead deployment, integration, and operationalization of SaaS security platforms across the enterprise. You will partner with application owners and platform teams to onboard SaaS apps, implement controls via APIs, and drive remediation of identified risks.

The role requires strong knowledge of OAuth, OIDC, SAML/SSO, and modern SaaS security architectures, with hands-on experience in SSPM and CASB.