Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and implement detection logic and security protocols to pinpoint threats, suspicious activities, and misconfigurations in SaaS applications.

• Investigate various SaaS platforms (such as Google Workspace, Microsoft 365, Salesforce, Slack, etc.) to gain insights into their security models, APIs, and potential vulnerabilities.

• Convert real-world attack methodologies and SaaS security challenges into scalable product functionalities, encompassing detections, posture assessments, and risk indicators.

• Contribute to the development of both threat detection and posture management materials, ensuring comprehensive coverage across identity, access, integrations, and data exposure risks.

• Examine large-scale SaaS telemetry to detect patterns, anomalies, and opportunities for enhancing detections or making improvements.

• Continuously enhance the quality of detections by minimizing false positives and ensuring signals are actionable for customers.

• Collaborate with the Engineering team to operationalize detection logic and ensure dependable execution at scale.

• Work in partnership with Product to determine how security insights are presented, prioritized, and conveyed to users.

• Keep abreast of emerging SaaS attack strategies, identity threats, OAuth vulnerabilities, and AI-related security issues.

• Contribute to internal knowledge sharing efforts and assist in elevating SaaS security expertise within the organization.

⛳️ Requirements

• 5–8+ years of experience in cybersecurity, with hands-on involvement in areas such as detection engineering, threat research, security analytics, or cloud/SaaS security.

• In-depth knowledge of SaaS security principles, including identity and access management, OAuth integrations, third-party application risks, and exposure due to misconfigurations.

• Experience handling security telemetry and logs, including the querying and analysis of extensive datasets (for instance, SQL, Python, or similar tools).

• Proven experience in developing or refining detection logic, rules, or analytics within a SIEM, XDR, or comparable system.

• Familiarity with APIs of SaaS applications and security-relevant data sources.

• Understanding of attacker tactics in SaaS environments, including identity-based attacks, privilege escalation, and persistence techniques.

• Capability to translate intricate technical findings into straightforward, actionable security insights.

• Experience in balancing detection fidelity, coverage, and performance in production environments.

• Background in collaborating with Product and Engineering to provide customer-facing security features.

• Strong analytical and problem-solving abilities, with meticulous attention to detail.

• Excellent written and verbal communication skills.

🏝️ Benefits

• Generous PTO

• Company and floating holidays

• Parental and family leave

• Health insurance (medical, dental, vision with HSA option)

• EAP

• Company-provided life insurance

• AD&D

• STD/LTD

• Supplemental life insurance options

• 401(k) with Roth

• Monthly wellness benefit reimbursement