Senior Staff SaaS Security Engineer

State Street

. Lead deployment, integration, and operationalization of SaaS Security Posture Management (SSPM), SaaS threat protection, and governance capabilities across enterprise SaaS platforms .

Posted 10/2/2026full-timeUnited StatesSenior💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SaaS Security Posture Management, cloud security, and identity security, with a strong focus on implementing security controls and managing risks across enterprise SaaS platforms. Proficient in automation, API integrations, and developing security standards to ensure continuous visibility and compliance.

Highest-signal resume keywords

SaaS Security Posture Management (SSPM)Cloud SecurityIdentity SecurityOAuth and OpenID Connect (OIDC)CISSP or CCSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SaaS Threat ProtectionAPI Permission ModelsAutomation FrameworksScripting SkillsSecurity Metrics TrackingRisk ManagementSecurity Architecture DocumentationTelemetry CollectionGovernance FrameworksApplication Onboarding

Soft Skills

Analytical SkillsProblem-SolvingCollaboration

Tools & Technologies

Obsidian SecurityCASBSaaS Security PlatformsCloud-Native Security Technologies

Certifications & Qualifications

CISSPCCSPAWS SecurityAzure Security

Industry Keywords

Financial ServicesHighly Regulated IndustriesEmerging AI Technologies

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Lead deployment, integration, and operationalization of SaaS Security Posture Management (SSPM), SaaS threat protection, and governance capabilities across enterprise SaaS platforms
Partner with application owners, platform teams, and security stakeholders to onboard SaaS applications, implement security controls, and drive remediation of identified risks
Design and maintain SaaS security integrations, API-based telemetry collection, and automation workflows for continuous visibility into SaaS security posture and threats
Develop and maintain SaaS security standards, architecture documentation, operational procedures, and implementation guidelines
Track and report SaaS security metrics, including application coverage, posture findings, threat exposure, and remediation progress
Report within the Defensive Engineering leadership team in Global Cyber Security (GCS)

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
8+ years of experience in information security focused on SaaS security, cloud security, identity security, or platform security
5+ years of hands-on experience with SSPM, CASB, SaaS threat protection, or related security technologies
Hands-on experience with SSPM, CASB, SaaS security, or SaaS threat protection platforms such as Obsidian Security
Strong understanding of SaaS-to-SaaS, identity-to-SaaS, and agent-to-SaaS threats, including account takeover, OAuth abuse, privilege escalation, data exposure, and unauthorized application access
Experience onboarding enterprise SaaS applications and implementing security controls through APIs, automation, and governance frameworks
Strong knowledge of OAuth, OpenID Connect (OIDC), SAML/SSO, API permission models, and modern SaaS security architectures
Strong analytical, problem-solving, automation, and scripting skills
Experience securing enterprise SaaS ecosystems and managing application risk at scale
Experience with modern SaaS platforms, APIs, automation frameworks, and cloud-native security technologies
Ability to collaborate effectively with global teams across multiple time zones
Standard business hours availability with flexibility to support critical incidents and deployments when required
Relevant cloud or information security certifications, such as CISSP, CCSP, or AWS/Azure Security, preferred
Experience working in financial services or other highly regulated industries preferred
Knowledge of emerging AI and agentic technologies and their impact on SaaS security is a plus

Benefits

Comp & perks

Retirement savings plan (401K) with company match
Basic life insurance
Medical insurance
Dental insurance
Vision insurance
Long-term disability insurance
Optional additional insurance coverages
Paid vacation leave
Paid sick leave
Short-term disability leave
Family care leave
Employee Assistance Program
Incentive compensation, including eligibility for annual performance-based awards
Certain tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks