Senior SaaS Security Engineer

CoStar Group is hiring a Senior SaaS Security Engineer to help build a strong practice in SaaS Application Security. The position involves standing up a single source of truth for SaaS inventory, implementing and operationalizing SSPM and CASB/SSE, and defining SaaS risk tiering and baseline control requirements.

Requirements

• Build the enterprise SaaS Security program
• Stand up a single source of truth for SaaS inventory
• Implement and operationalize SSPM and extend existing capabilities in CASB/SSE
• Define SaaS risk tiering and baseline control requirements
• Engineer governed OAuth/consent patterns across IDP and key platforms
• Integrate SaaS signals into SIEM/SOAR
• Author and exercise SaaS IR playbooks
• Codify SaaS security standards and exception management with GRC
• Enable business adoption of secure patterns and migration plans for risky patterns
• Publish dashboards and metrics for leadership

Benefits

• Comprehensive healthcare coverage
• Life, legal, and supplementary insurance
• Virtual and in person mental health counseling services
• Commuter and parking benefits
• 401(K) retirement plan with matching contributions
• Employee stock purchase plan
• Paid time off
• Tuition reimbursement
• On-site fitness center and/or reimbursed fitness center membership costs
• Access to CoStar Group's Diversity, Equity, & Inclusion Employee Resource Groups
• Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks