Do you find yourself interested in and keeping up with the latest SaaS identity (Okta, Entra ID, etc.) feature announcements, as well as SaaS vulnerabilities and breaches?

Are you self-motivated and looking for an opportunity to rapidly accelerate your skills?

Do you crave new and innovative work that actually matters to your customer?

Do you have a technical Information Security background that you’re not fully utilizing?

Are you capable of operating as an individual contributor and occasionally leading teams and interacting with customers?

Do you love working around like-minded, smart people who you can learn from and mentor on a daily basis?

Lead engagements and perform analysis on technical assessments looking for evidence of compromise and/or security misconfigurations in SaaS platforms including

Produce high-quality written and verbal reports, presentations, recommendations, and findings to key stakeholders including customer management, regulators, and legal counsel.

Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.

Knowledge of identity protocols, such as OAuth, SAML, and OpenID Connect for user access to SaaS applications.

An understanding of cloud identity, including RBAC, ABAC, SSO, MFA, and SaaS integration with cloud-based Identity Providers (IdPs).

A practical understanding of one or more of the following IdP platforms: Entra ID, Okta, Cloud Identity (Google Workspace), or Ping Identity.

An understanding of logging, monitoring, and alerting to detect unauthorized access to SaaS applications.

Hands-on experience reviewing SaaS or other platform security configurations including both using existing assessment tools and possibly scripting your own.

Communications: strong ability to communicate executive and/or detailed level findings to clients; ability to effectively communicate tasks, guidance, and methodology with internal teams.

Familiarity with SaaS operations in an enterprise environment.

Knowledge of API authentication and authorization, including token-based security and OAuth.

Knowledge of SaaS architecture design principals, including data segmentation, multi-tenancy, and isolation.

Familiarity with one or more of SaaS security platforms.

Cloud Operations: familiarity with modern cloud workloads - DevOps, CICD pipelines, containers, and related security defenses and pitfalls.

Cloud Incident Response: knowledge in AWS, Azure, M365, or GCP incident response methodologies.

Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations related to major cloud platforms.

Capable of completing technical tasks without supervision.

Desire to grow and expand both technical and soft skills.

Strong project management skills.

Ability to foster a positive work environment and attitude.