Senior Staff SaaS Security, Defensive Engineering

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Boston, MABerwyn, PAClifton, NJAustin, TX
Employment
Full-time
Posted
51 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $198k
$146k $248k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $164,525–$231,150.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 360 open roles on FindRole.

Listed pay typically runs $115,000–$188,750 across 171 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Senior Staff SaaS Security, Defensive Engineering

The Senior Staff SaaS Security, Defensive Engineering role reports to the Head of Defensive Engineering to lead the deployment, integration, and operationalization of SaaS security platforms. You will manage SaaS Security Posture Management and threat monitoring capabilities across the enterprise ecosystem. Daily responsibilities include onboarding applications, implementing security controls, designing telemetry collection, and developing automation workflows. You will maintain security standards, architecture documentation, and operational procedures while tracking key metrics like application coverage and remediation progress. Required skills include hands-on experience with SSPM, CASB, and SaaS threat protection platforms like Obsidian Security. You must understand identity-based threats, OAuth, SSO/SAML, and API permissions. The role addresses technical problems involving SaaS-to-SaaS threats, account takeover, privilege escalation, and data exposure within a regulated financial services context.

What you'll do

  • Lead the deployment and operationalization of SSPM and SaaS threat monitoring capabilities.
  • Onboard SaaS applications and implement security controls with application and platform owners.
  • Design integrations and automation workflows for continuous telemetry collection and risk visibility.
  • Develop and maintain SaaS security standards, architecture documentation, and operational procedures.
  • Track and report key metrics regarding application coverage, posture findings, and remediation progress.
  • Remediate identified risks including account takeover, privilege escalation, and OAuth abuse.

What we're looking for

  • 8+ years of experience in information security, focusing on SaaS, cloud, or identity security.
  • 5+ years of hands-on experience with SSPM, CASB, SaaS threat protection, or related security platforms.
  • Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
  • Hands-on implementation experience with SSPM, CASB, SaaS security, or SaaS threat protection platforms (preferred).
  • Experience in financial services or other regulated industries (preferred).
  • Relevant cloud or information security certifications (preferred).
  • Proficiency in scripting and automation for platform integration and operational efficiency.
  • Strong knowledge of OAuth, SSO/SAML, API permissions, and security models used by modern SaaS platforms.

More like this

Similar roles

Senior Staff SaaS Security Engineer

State Street

Boston, MA +3 37 days ago
SaaS Security Posture Management (SSPM) CASB SaaS Security OAuth OpenID Connect (OIDC) SAML SSO Automation Scripting Cloud Security Identity Security Obsidian Security AWS Azure
8+ yrs exp Hybrid

Staff Applications Security Engineer

Fortinet

Sunnyvale, CA 3 days ago $170,000–$240,000
Application Security SAST DAST IAST SCA Python Java .NET JavaScript OWASP Top 10 API Security Cloud-Native Microservices Containerization CI/CD DevSecOps Threat Modeling MITRE ATT&CK STRIDE PASTA OAuth JWT CSP SOP CORS AI Red Teaming CSPM ASPM Penetration Testing
5+ yrs exp Hybrid

Senior Engineer, Information Security

Carvana

Tempe, AZ 4 days ago
SOAR Python LLM REST APIs Torq Splunk SOAR Cortex XSOAR Swimlane SIEM EDR Firewalls MITRE ATT&CK Incident Response Version Control
5+ yrs exp

Senior Security Engineer, Identity

Ramp

New York City, NY 3 days ago $175,200–$240,900
Okta Terraform Python Go IAM OAuth 2.0 OIDC SAML SCIM IGA JWT Cross App Access ID-JAG ISPM Google Workspace
6+ yrs exp Hybrid

Senior Security Firmware Engineer, Data Center Systems

Nvidia

Remote (Santa Clara, CA) +3 3 days ago $184,000–$287,500
Firmware Engineering Root of Trust C C++ Rust Python Cryptography Attestation SPDM TCG DICE TrustZone OP-TEE Keystone OpenBMC Threat Modeling FIPS 140-3
7+ yrs exp Remote

Senior Cyber Security Engineer

L3Harris

Rochester, NY +1 3 days ago $92,500–$171,500
Risk Management Framework (RMF) System Security Engineering ACAS SCC NIST 800-53 NIST 800-160 JSTIG ICD-503 CNSSI 1253 DoD 8510 DoD 5200.39 Encryption Vulnerability Assessment Verification and Validation Configuration Management CPI High Assurance Devices Embedded Systems COTS GOTS FOSS
6+ yrs exp