SaaS Security Engineer

SaaS Security Engineer

The SaaS Security Engineer role is targeting candidates based in Hyderabad, Gurugaon, or Noida. We welcome applications from candidates who are currently residing anywhere in these regions.

About the Role
Blu Ocean Cyber is seeking a Security Engineer to help design, build, and mature security programs across cloud, application, product, and SaaS environments. This role is ideal for a security professional with strong foundational experience across modern cloud and application security who can own processes end-to-end, drive accountability, and grow into deeper specialization across SaaS and SaaS Security Posture Management.

You will partner with clients and internal teams to identify risk, implement security controls, improve visibility, and operationalize repeatable security processes. We are looking for someone who can combine strong technical judgment with practical execution: someone who can assess a problem, define the path forward, coordinate stakeholders, and see the work through to completion.

What You’ll Do
Serve as a technical security engineer and consultant across cloud, application, product, and SaaS security engagements.
Own security processes end-to-end, including assessment, prioritization, implementation, documentation, handoff, operationalization, and continuous improvement.
Assess cloud and application environments to identify misconfigurations, insecure patterns, excessive permissions, control gaps, and opportunities to reduce risk.
Support secure design and architecture reviews for cloud infrastructure, SaaS platforms, internal applications, product features, APIs, and integrations.
Partner with engineering, product, IT, and security stakeholders to translate security requirements into practical, scalable solutions.
Design and implement security controls across cloud platforms, identity systems, SaaS applications, CI/CD pipelines, APIs, and product environments.
Support vulnerability management, threat modeling, secure configuration, access control, and risk remediation efforts.
Help mature security governance, standards, reference architectures, and operational playbooks across client environments.
Integrate security tooling with existing workflows, including SIEM, SOAR, ITSM, ticketing, cloud-native security tools, and SaaS security platforms.
Create dashboards, reports, documentation, and executive-ready summaries that clearly communicate risk, progress, and accountability.
Develop scripts, automations, or repeatable workflows to improve security visibility, remediation, evidence collection, and operational efficiency.

What You’ll Bring — Required
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
3-7 years of hands-on security experience, with meaningful exposure to cloud security, application security, product security, security engineering, or security operations.
Strong working knowledge of cloud security concepts across AWS, Azure, or Google Cloud, including IAM, networking, logging, monitoring, encryption, secure configuration, and least privilege.
Experience assessing and improving the security of applications, products, APIs, or cloud-hosted services.
Ability to identify security gaps, prioritize risk, define remediation plans, and drive work through completion.
Experience owning security processes end-to-end, including building repeatable workflows, documenting requirements, tracking accountability, and ensuring outcomes are delivered.
Strong understanding of identity and access management, including SSO, IAM, MFA, least privilege, role design, and federation concepts such as SAML or OIDC.
Working knowledge of common security frameworks and control models such as NIST…