EngineerJobs.io
← Back to all jobs
State Street

Senior Staff SaaS Security Engineer

State Street
Boston, MA $120k - $203k/yr Full time Posted 20d ago
Senior Application Security Casb Data Security Identity and Access Management Information Security InfoSec Risk Governance SaaS Saas Security Posture Management Security Automation Security Engineering Security Standards Software Security Solution Architecture
Apply Now

Job Description

The Senior Staff SaaS Security Engineer will support Defensive Engineering leadership within State Street’s Global Cyber Security organization. This position is focused on deploying, integrating, and operationalizing SaaS security platforms and controls to improve visibility, governance, and protection across the enterprise SaaS environment.

Responsibilities

  • Lead the deployment, integration, and operationalization of SaaS Security Posture Management (SSPM), SaaS threat protection, and governance capabilities across enterprise SaaS platforms.
  • Collaborate with application owners, platform teams, and security stakeholders to onboard SaaS applications, implement security controls, and drive remediation of identified risks.
  • Design and maintain SaaS security integrations, including API-based telemetry collection and automation workflows, to support continuous visibility into SaaS security posture and threats.
  • Develop and maintain SaaS security standards, architecture documentation, operational procedures, and implementation guidelines.
  • Track and report SaaS security metrics, including application coverage, posture findings, threat exposure, and remediation progress.

Requirements

  • Hands-on experience with SSPM, CASB, SaaS security, or SaaS threat protection platforms such as Obsidian Security.
  • Strong understanding of SaaS-to-SaaS, identity-to-SaaS, and agent-to-SaaS threats, including account takeover, OAuth abuse, privilege escalation, data exposure, and unauthorized application access.
  • Experience onboarding enterprise SaaS applications and implementing security controls using APIs, automation, and governance frameworks.
  • Strong knowledge of OAuth, OpenID Connect (OIDC), SAML/SSO, API permission models, and modern SaaS security architectures.
  • Analytical and problem-solving ability with strong automation and scripting skills.
  • Experience securing enterprise SaaS ecosystems and managing application risk at scale.
  • Experience working with modern SaaS platforms, APIs, automation frameworks, and cloud-native security technologies.
  • Knowledge of emerging AI and agentic technologies and their impact on SaaS security is a plus.
  • Ability to collaborate effectively with global teams across multiple time zones.

Work model: Hybrid work model in accordance with company policy. Standard business hours with flexibility to support critical incidents and deployments when required.

Technologies

  • SaaS Security Posture Management (SSPM)
  • CASB
  • Obsidian Security
  • OAuth
  • OpenID Connect (OIDC)
  • SAML/SSO
  • API permission models
  • API-based telemetry collection
  • Automation workflows
  • AI
  • Agentic technologies

Education

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Experience

Minimum of 5 years of relevant experience.

Location

Boston, MA (hybrid)

Salary

USD 120,000 - 202,500 per year

Benefits

  • 401K with company match
  • Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
  • Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
  • Access to the Employee Assistance Program
  • Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
  • Eligibility for certain tax advantaged savings plans

Similar Jobs