Application Security Engineer in Mundelein

The ideal candidate has hands-on experience with an SSPM platform such as CrowdStrike Falcon Shield, AppOmni, Obsidian Security, Grip Security, DoControl, or a similar tool.

\n

Important: This role specifically requires experience using an SSPM tool. Experience solely with EDR, ITDR, SIEM, or traditional security monitoring tools does not meet the core requirement., * Hands-on experience with an SSPM (SaaS Security Posture Management) platform. \n

• Experience with CrowdStrike Falcon Shield is highly desirable, but experience with other SSPM platforms such as AppOmni, Obsidian Security, Grip Security, DoControl, or similar tools is also relevant. \n

• Demonstrated experience onboarding SaaS applications into an SSPM platform, establishing visibility, reviewing findings, and driving remediation. \n

• Experience working directly with application owners, business stakeholders, and technical teams to remediate SaaS security findings. \n

• Familiarity with securing enterprise SaaS applications, ideally including one or more of: \n

• Salesforce \n

• Workday \n

• Box \n

• Microsoft 365 \n

• SharePoint Online \n

• Experience tracking security remediation, burndown, KPIs/KRIs, or similar security posture metrics. \n

• Python or other scripting/programming experience . \n

• Ability to understand technical security findings and communicate them effectively to non-security stakeholders. \n

• Strong problem-solving skills with an interest in automation and continuous workflow improvement. \n

• Experience using AI/LLM technologies to improve or automate security workflows is a plus. \n

• Ability to work in a hybrid NYC environment 2-3 days per week. \n

n \n

• Onboard critical SaaS applications into an SSPM platform to establish security visibility and baseline posture. \n

• Use SSPM tooling to identify misconfigurations, security gaps, excessive permissions, and other SaaS security findings. \n

• Partner directly with application owners and business stakeholders to understand findings and drive remediation. \n

• Translate SaaS security issues into practical, understandable recommendations for stakeholders who may not have a security background. \n

• Track remediation progress and maintain visibility into security finding burndown. \n

• Report on improvements to SaaS security posture through MBR/MTM metrics and reporting. \n

• Work with security and application teams to harden high-value SaaS applications. \n

• Support security efforts across critical applications such as Salesforce, Workday, Box, Microsoft 365/SharePoint Online, and similar platforms. \n

• Develop or enhance scripts and workflows to improve efficiency and automate repetitive security processes. \n

• Use Python or other scripting/programming to support automation, integrations, reporting, and workflow optimization. \n

• Identify opportunities to leverage AI and emerging AI models to improve security workflows, automate processes, and optimize existing systems. \n

• Help continuously improve SaaS security processes, tooling, and operational workflows. \n

\n

\n