Cloud Security Posture Management

Cloud Security Posture Management Engineer

The SaaS Security Posture Management (SSPM) Engineer is responsible for designing, implementing, and operating SaaS security controls and posture management capabilities across the enterprise SaaS ecosystem. This role combines SaaS security engineering, cloud security, automation, and governance to continuously identify, assess, and remediate security risks within SaaS platforms while supporting secure adoption of cloud and AI-enabled services.

Key Responsibilities

• SaaS Security Engineering
• Deploy, configure, and operate SSPM platforms to continuously monitor SaaS security posture.
• Assess SaaS applications for configuration drift, identity risks, excessive permissions, data exposure, and third-party application risks.
• Establish and maintain SaaS security baselines and remediation workflows.
• Support SaaS onboarding, certification, and governance processes.

• Automation & Integration
• Build automation workflows and integrations between SSPM platforms, IAM, SIEM, ticketing, and governance systems.
• Develop dashboards, reporting, and metrics to provide visibility into SaaS security posture and compliance.
• Leverage APIs, scripting, and Infrastructure-as-Code to improve operational efficiency and security automation.

• Cloud & SaaS Security
• Knowledge about SaaS integrations with AWS, Google Cloud Platform (GCP), Microsoft Azure, and Oracle Cloud Infrastructure (OCI).
• Assess identity federation, API connectivity, data protection, logging, and monitoring controls across SaaS and cloud environments.
• Partner with cloud security teams to ensure consistent control implementation and risk management.

• Governance & Risk Management
• Document findings, remediation recommendations, and residual risks.
• Contribute to SaaS security standards, control frameworks, and secure-by-design guidance.
• Support risk assessments, exception reviews, and security certification activities.

Required Experience & Skills

• 5+ years of experience in Security Engineering, Cloud Security, or SaaS Security.
• Hands-on experience with one or more SSPM platforms such as App Omni, Obsidian, Palo Alto, Adaptive Shield, Wing Security, Valence, or similar technologies.
• Strong understanding of SaaS security, IAM, Data Protection, API Security, and Security Monitoring.
• Experience with AWS, GCP, Azure, and/or OCI security concepts and controls.
• Proficiency in Python, Power Shell, APIs, Terraform, Git Hub, and automation frameworks.
• Experience integrating security tooling and building automated workflows.

Preferred Qualifications

• Experience with CASB technologies and SaaS governance programs.
• Familiarity with AI/GenAI-enabled SaaS security risks.
• Relevant certifications such as CISSP, CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer, Azure Security Engineer, or OCI Security Professional.

Areas of responsibility

• Monitoring and Incident Detection
  - Analyze attack trends and correlate logs across systems to identify advanced threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.
• Incident Handling and Analysis
  - Perform root cause analysis, create incident response plans, and implement disaster recovery measures to minimize business disruption.
• Threat Assessment and Analytics
  - Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.
• Stakeholder Coordination and Audit Assistance
  - Liaise with cross-functional teams, external vendors, and auditors to ensure compliance with security frameworks. Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance.
• Training and Awareness
  - Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.