SaaS Security Posture Management Engineer

SaaS Security Posture Management (SSPM) Engineer

Location: Phoenix, AZ 85054



Duration: 6 months



Experience Required: 5+ years



Education: Bachelor's degree

Job Overview

The SaaS Security Posture Management (SSPM) Engineer will be responsible for designing, implementing, and operating SaaS security controls and posture management capabilities across an enterprise SaaS ecosystem.

This role combines SaaS security engineering, cloud security, automation, and governance to continuously identify, assess, and remediate security risks within SaaS platforms while supporting the secure adoption of cloud and AI-enabled services.

Top Required Skills

1. Deploy, configure, and operate SSPM platforms to continuously monitor SaaS security posture.

2. Hands-on experience with one or more SSPM platforms such as AppOmni, Obsidian, Palo Alto, Adaptive Shield, Wing Security, Valence, or similar technologies.

3. Knowledge of SaaS integrations with Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI).

Top Preferred Skills

1. Build automation workflows and integrations between SSPM platforms, IAM, SIEM, ticketing, and governance systems.

2. Leverage APIs, scripting, and Infrastructure-as-Code to improve operational efficiency and security automation.

3. Familiarity with AI/GenAI-enabled SaaS security risks.

SaaS Security Engineering

• Deploy, configure, and operate SSPM platforms to continuously monitor SaaS security posture.

• Assess SaaS applications for configuration drift, identity risks, excessive permissions, data exposure, and third-party application risks.

• Establish and maintain SaaS security baselines and remediation workflows.

• Support SaaS onboarding, certification, and governance processes.

• Build automation workflows and integrations between SSPM platforms, IAM, SIEM, ticketing, and governance systems.

• Develop dashboards, reports, and metrics to provide visibility into SaaS security posture and compliance.

• Leverage APIs, scripting, and Infrastructure-as-Code to improve operational efficiency and security automation.

Cloud & SaaS Security

• Work with SaaS integrations across AWS, Google Cloud Platform (GCP), Microsoft Azure, and Oracle Cloud Infrastructure (OCI).

• Assess identity federation, API connectivity, data protection, logging, and monitoring controls across SaaS and cloud environments.

• Partner with cloud security teams to ensure consistent security control implementation and risk management.

Governance & Risk Management

• Document security findings, remediation recommendations, and residual risks.

• Contribute to SaaS security standards, control frameworks, and secure-by-design guidance.

• Support risk assessments, exception reviews, and security certification activities.

Required Experience & Skills

• 5+ years of experience in Security Engineering, Cloud Security, SaaS Security, or a related field.

• Hands-on experience with one or more SSPM platforms such as AppOmni, Obsidian, Palo Alto, Adaptive Shield, Wing Security, Valence, or similar technologies.

• Strong understanding of SaaS security, IAM, data protection, API security, and security monitoring.

• Experience with AWS, GCP, Azure, and/or OCI security concepts and controls.

• Proficiency in Python, PowerShell, APIs, Terraform, GitHub, and automation frameworks.

• Experience integrating security tools and building automated workflows.

• Strong troubleshooting, analytical, and communication skills.

Preferred Qualifications

• Experience with CASB technologies and SaaS governance programs.

• Familiarity with AI/GenAI-enabled SaaS security risks.

• Relevant certifications such as:

  • CISSP

  • CCSP

  • AWS Security Specialty

  • Google Professional Cloud Security Engineer

  • Azure Security Engineer

  • OCI Security Professional

Data Security & Integration Experience

• Experience with modern data architectures, including data lakes, warehouses, and distributed systems.

• Understanding of structured and unstructured data ecosystems.

• Knowledge of data classification methodologies and regulatory requirements such as PCI and PII.

• Experience designing and implementing enterprise-scale integrations with data catalogs, ITAM/CMDB systems, SIEM/SOAR platforms, or security analytics solutions.

• Strong knowledge of REST APIs and event-driven integration patterns.

• Experience with Python or other scripting languages.