Job Title : SaaS Security Analyst / SaaS Security Engineer

Sector : Distribution

Employment Type : Full-Time

Number of Positions : 1

Interview Requirement :

- Candidate must be available for Face-to-Face interviews at the IBM office location as per account requirements.

- Day 1 reporting is mandatory upon onboarding.

Job Description :

We are seeking an experienced SaaS Security Analyst/Engineer with strong expertise in SaaS Security Posture Management (SSPM), cloud identity security, and risk management. The ideal candidate will be responsible for assessing, monitoring, and improving the security posture of enterprise SaaS applications while collaborating with cross-functional teams to mitigate risks and strengthen security controls.

Key Responsibilities :

- Assess and monitor SaaS application security posture using SSPM platforms.

- Identify security gaps, misconfigurations, excessive permissions, and data exposure risks across SaaS environments.

- Analyze and prioritize security findings based on risk and business impact.

- Review SaaS application configurations related to authentication, authorization, data sharing, and third-party integrations.

- Collaborate with application owners, infrastructure teams, and business stakeholders to remediate security issues.

- Develop recommendations to improve SaaS security controls and governance.

- Support security investigations, audits, compliance reviews, and risk assessments.

- Create documentation, security reports, and remediation guidelines.

- Participate in security awareness and enablement activities across business teams.

Required Skills :

SaaS Security & SSPM :

- Hands-on experience with SaaS Security Posture Management (SSPM) tools such as :

1. Reco

2. Adaptive Shield

3. AppOmni

4. Wiz SaaS

5. Similar SSPM platforms

- Strong understanding of SaaS security architecture and risk management.

Identity & Access Management :

- Single Sign-On (SSO)

- Multi-Factor Authentication (MFA)

- Role-Based Access Control (RBAC)

- Identity Governance concepts

- Experience with Microsoft Entra ID (Azure Active Directory) preferred.

SaaS Security Domains :

- Data exposure and sharing controls

- API security

- OAuth permissions and token management

- User access reviews

- Third-party application integrations

- Privileged access management concepts

Operational & Risk Management Skills :

- Security triage and risk-based prioritization.

- Ability to differentiate between :

1. Platform limitations

2. Security misconfigurations

3. Legitimate security risks

4. Acceptable business exceptions

- Experience handling vulnerability and security findings remediation processes.

Tools & Platforms :

- ServiceNow

- Jira

- Jira Service Management (JSM)

- Ticketing and workflow management systems

Communication & Stakeholder Management :

- Ability to translate technical security findings into clear and actionable recommendations.

- Strong written and verbal communication skills.

- Experience working with non-security stakeholders and business users.

- Ability to prepare executive-level reports and remediation plans.

Preferred Skills :

- Experience in cloud security and SaaS governance.

- Knowledge of security frameworks such as ISO 27001, NIST, CIS Controls, or SOC2.

- Experience with enterprise security operations and compliance programs.

- Familiarity with CASB, IAM, and Cloud Security Posture Management (CSPM) tools.

Behavioral Skills :

- Strong analytical and problem-solving abilities.

- Excellent communication and collaboration skills.

- Ability to work independently and manage multiple priorities.

- Strong attention to detail and risk-focused mindset.

Qualification :

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.