Application Security Engineer

Job Description

SaaS Security Engineer

\n

6–9 Month Contract | Potential Extension

\n

Hybrid – New York City | 2–3 Days/Week Onsite

\n

\n

Overview

\n

Our client is seeking a SaaS Security Engineer to help strengthen the security posture of its critical SaaS applications. This role will focus heavily on SaaS Security Posture Management (SSPM) , including onboarding applications into an SSPM platform, identifying and remediating security findings, partnering with application owners, and tracking improvements in SaaS security posture over time.

\n

The ideal candidate has hands-on experience with an SSPM platform such as CrowdStrike Falcon Shield, AppOmni, Obsidian Security, Grip Security, DoControl, or a similar tool .

\n

Important: This role specifically requires experience using an SSPM tool . Experience solely with EDR, ITDR, SIEM, or traditional security monitoring tools does not meet the core requirement.

\n

\n

What You'll Do

\n

\n
• Onboard critical SaaS applications into an SSPM platform to establish security visibility and baseline posture.
\n
• Use SSPM tooling to identify misconfigurations, security gaps, excessive permissions, and other SaaS security findings.
\n
• Partner directly with application owners and business stakeholders to understand findings and drive remediation.
\n
• Translate SaaS security issues into practical, understandable recommendations for stakeholders who may not have a security background.
\n
• Track remediation progress and maintain visibility into security finding burndown .
\n
• Report on improvements to SaaS security posture through MBR/MTM metrics and reporting .
\n
• Work with security and application teams to harden high-value SaaS applications.
\n
• Support security efforts across critical applications such as Salesforce, Workday, Box, Microsoft 365/SharePoint Online , and similar platforms.
\n
• Develop or enhance scripts and workflows to improve efficiency and automate repetitive security processes.
\n
• Use Python or other scripting/programming languages to support automation, integrations, reporting, and workflow optimization.
\n
• Identify opportunities to leverage AI and emerging AI models to improve security workflows, automate processes, and optimize existing systems.
\n
• Help continuously improve SaaS security processes, tooling, and operational workflows.
\n

\n

\n

What We're Looking For

\n

\n
• Hands-on experience with an SSPM (SaaS Security Posture Management) platform .
\n
• Experience with CrowdStrike Falcon Shield is highly desirable, but experience with other SSPM platforms such as AppOmni, Obsidian Security, Grip Security, DoControl , or similar tools is also relevant.
\n
• Demonstrated experience onboarding SaaS applications into an SSPM platform , establishing visibility, reviewing findings, and driving remediation.
\n
• Experience working directly with application owners, business stakeholders, and technical teams to remediate SaaS security findings.
\n
• Familiarity with securing enterprise SaaS applications, ideally including one or more of:
\n
• Salesforce
\n
• Workday
\n
• Box
\n
• Microsoft 365
\n
• SharePoint Online
\n
• Experience tracking security remediation, burndown, KPIs/KRIs, or similar security posture metrics.
\n
• Python or other scripting/programming experience preferred.
\n
• Ability to understand technical security findings and communicate them effectively to non-security stakeholders.
\n
• Strong problem-solving skills with an interest in automation and continuous workflow improvement.
\n
• Experience using AI/LLM technologies to improve or automate security workflows is a plus.
\n
• Ability to work in a hybrid NYC environment 2–3 days per week .
\n

\n