Senior SaaS Security Architect & Threat Lead

State Street; Boston (MA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical/Dental/Vision Insurance

Paid time off

Employee Assistance Program

Job summary

State Street in Boston seeks a Senior Staff SaaS Security Engineer to lead deployment and operationalization of SSPM and related SaaS security controls across the enterprise. You will partner with application owners and platform teams to onboard SaaS apps, implement controls, and drive remediation of risks.

The role requires deep knowledge of SaaS security architectures, OAuth/OIDC/SAML, and automation. A strong track record in regulated industries is preferred, with hybrid work expectations.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years in information security focused on SaaS, cloud, identity, or platform security.
• 5+ years hands-on with SSPM, CASB, SaaS threat protection, or related technologies.
• Experience in financial services or highly regulated industries preferred.
• Certifications such as CISSP, CCSP, AWS/Azure Security preferred.

Responsibilities

• Lead deployment, integration, and operationalization of SSPM, threat protection, and governance across enterprise SaaS.
• Onboard SaaS apps with owners and security stakeholders; implement controls and remediate risks.
• Design and maintain SaaS security integrations, API-based telemetry collection, and automation workflows.

Skills

SaaS Security Platform Expertise

SSPM/CASB experience

OAuth/OIDC/SAML

Automation & Scripting

Onboarding SaaS Apps

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Obsidian Security

Job description

State Street in Boston seeks a Senior Staff SaaS Security Engineer to lead deployment and operationalization of SSPM and related SaaS security controls across the enterprise. You will partner with application owners and platform teams to onboard SaaS apps, implement controls, and drive remediation of risks.

The role requires deep knowledge of SaaS security architectures, OAuth/OIDC/SAML, and automation. A strong track record in regulated industries is preferred, with hybrid work expectations.