Senior Staff SaaS Security, Defensive Engineering
About this role
Who we are looking for
We are looking for a Senior Staff SaaS Security Engineer reporting directly to a Head of Defensive Engineering organization. You will lead the deployment, integration, and operationalization of SaaS security platforms and controls, driving visibility, governance, and protection across the enterprise SaaS ecosystem.
What You Will Be Responsible For
- Lead the deployment, integration, and operationalization of SaaS Security Posture Management (SSPM) and SaaS threat monitoring capabilities across enterprise SaaS platforms.
- Partner with application and platform owners to onboard SaaS applications, implement security controls, and improve security posture through remediation of identified risks.
- Design and maintain integrations, telemetry collection, and automation workflows to enable continuous visibility into SaaS security risks and threats.
- Develop and maintain SaaS security standards, architecture documentation, operational procedures, and implementation guidelines.
- Track and report key SaaS security metrics, including application coverage, posture findings, SaaS threats, and remediation progress.
What We Value
These skills will help you succeed in this role
- Hands-on implementation experience with SSPM, CASB, SaaS security, or SaaS threat protection platforms (e.g., Obsidian Security).
- Strong understanding of SaaS-to-SaaS, identity-based, and agentic AI-related threats, including account takeover, privilege escalation, OAuth abuse, data exposure, and unauthorized application access.
- Experience onboarding enterprise SaaS applications and implementing security controls through API integrations and governance frameworks.
- Experience partnering with application owners and platform teams to drive posture improvements and remediation efforts.
- Strong knowledge of OAuth, SSO/SAML, API permissions, and security models used by modern SaaS platforms.
- Familiarity with SaaS security architecture, governance capabilities, and application risk management.
- Strong analytical, troubleshooting, and problem-solving skills.
- Proficiency in scripting and automation for platform integration and operational efficiency.
Education & Preferred Qualifications
- 8+ years of experience in information security, with a focus on SaaS security, cloud security, or identity security.
- 5+ years of hands-on experience with SSPM, CASB, SaaS threat protection, or related security platforms.
- Experience in financial services or other regulated industries preferred.
- Relevant cloud or information security certifications preferred.
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
Salary Range:
$120,000 - $202,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Frequently Asked Questions
What is the salary for the Senior Staff SaaS Security, Defensive Engineering role at statestreet?
Where is the Senior Staff SaaS Security, Defensive Engineering position at statestreet located?
Is the Senior Staff SaaS Security, Defensive Engineering role at statestreet full-time or part-time?
Which team or department does the Senior Staff SaaS Security, Defensive Engineering at statestreet belong to?
How do I apply for the Senior Staff SaaS Security, Defensive Engineering position at statestreet?
When was the Senior Staff SaaS Security, Defensive Engineering job at statestreet posted?
You'll be redirected to statestreet's official application page on Workday.