SaaS Security Posture Management (SSPM) Engineer
About the role
As a SaaS Security Posture Management (SSPM) Engineer, you will make an impact by strengthening the security, governance, and resilience of enterprise SaaS platforms through continuous monitoring, risk assessment, and automation. You will be a valued member of the Cybersecurity team and work collaboratively with cloud security, identity management, governance, and engineering teams to help secure the organization's expanding SaaS and cloud ecosystem while enabling business innovation.
In this role, you will:
- Design, deploy, and manage SaaS Security Posture Management (SSPM) capabilities to identify and remediate security risks across enterprise SaaS platforms.
- Assess SaaS environments for configuration weaknesses, identity and access risks, excessive permissions, data exposure, and third-party application vulnerabilities.
- Develop integrations and automation workflows between SSPM solutions, IAM platforms, SIEM tools, governance systems, and service management platforms.
- Partner with cloud security and infrastructure teams to implement consistent security controls across AWS, Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud Infrastructure (OCI), and SaaS environments.
- Contribute to SaaS governance, risk management, compliance initiatives, security standards, and secure-by-design practices while providing actionable recommendations to stakeholders.
Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position requiring 3 days per week in a Cognizant or client office in Phoenix, AZ. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
What you need to have to be considered
- 5+ years of experience in Security Engineering, Cloud Security, SaaS Security, or related cybersecurity disciplines.
- Hands-on experience with SaaS Security Posture Management (SSPM) platforms such as AppOmni, Obsidian, Palo Alto SSPM, Adaptive Shield, Wing Security, Valence, or similar technologies.
- Strong understanding of SaaS security, Identity and Access Management (IAM), API security, data protection, and security monitoring principles.
- Experience securing cloud environments, including AWS, Google Cloud Platform (GCP), Microsoft Azure, and/or Oracle Cloud Infrastructure (OCI).
- Proficiency in automation and scripting technologies such as Python, PowerShell, APIs, Terraform, GitHub, and related security automation frameworks.
- Experience integrating security tools and building automated workflows to improve visibility, risk management, and operational efficiency.
- Understanding of security controls, governance frameworks, risk assessment methodologies, and compliance requirements.
- Strong analytical, communication, stakeholder management, and problem-solving skills.
These will help you stand out
- Experience with Cloud Access Security Broker (CASB) solutions and enterprise SaaS governance programs.
- Familiarity with AI and Generative AI security risks associated with SaaS platforms and emerging technologies.
- Experience developing security dashboards, metrics, reporting frameworks, and executive-level risk summaries.
- Knowledge of identity federation, cloud-native security architectures, logging, monitoring, and data protection technologies.
- Experience supporting enterprise security certification, audit, exception management, and risk review processes.
- Relevant certifications such as CISSP, CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer, Azure Security Engineer Associate, or OCI Security Professional.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
