SaaS Security Expert - Talent Pool (BA)

About the Role

The role entails day-to-day collaboration with cross-functional teams to assess, design, and implement security best practices across SaaS applications and cloud-native environments. You will be working in a fast-paced, remote environment, requiring strong communication skills and the ability to adapt to changing project requirements.

Band of Coders is committed to building a talented team of security experts who can work collaboratively to deliver high-quality results. As a SaaS Security Expert, you will be an integral part of this team, working on exciting projects that require innovative security solutions.

What You Will Do

• Identify and mitigate vulnerabilities in SaaS applications and cloud-based environments
• Design and implement security strategies for SaaS platforms and cloud-based applications
• Perform security assessments, audits, and risk analyses to ensure compliance with industry standards
• Support incident response and remediation processes to minimize security breaches
• Ensure compliance with relevant standards, such as ISO 27001, SOC 2, GDPR, and more
• Collaborate with DevOps teams to integrate security into CI/CD pipelines using a DevSecOps approach
• Conduct security reviews of third-party SaaS vendors and integrations to ensure secure partnerships
• Develop and implement security best practices across SaaS applications and cloud-native environments
• Work closely with cross-functional teams to strengthen security posture and ensure compliance with industry standards
• Provide security guidance and recommendations to stakeholders and project teams
• Stay up-to-date with emerging security threats and technologies, applying this knowledge to improve security posture

What We Are Looking For

• Proven experience in SaaS security, with a strong understanding of cloud security and DevSecOps
• Knowledge of SaaS platforms, including AWS, Azure, and GCP
• Experience with identity and access management (IAM), single sign-on (SSO), multi-factor authentication (MFA), and zero-trust architectures
• Familiarity with compliance frameworks and regulatory requirements, such as ISO 27001, SOC 2, GDPR, and more
• Strong communication skills and ability to work in distributed teams
• Advanced English proficiency, with excellent written and verbal communication skills
• Experience working in fast-paced, remote environments, with the ability to adapt to changing project requirements
• Strong problem-solving skills, with the ability to analyze complex security issues and develop innovative solutions

Nice to Have

• Security certifications, such as CISSP, CISM, CCSP, or Security+
• Experience in multi-tenant SaaS environments, with a strong understanding of cloud security and scalability
• Hands-on experience with security tools, such as vulnerability scanners, SIEM, CSPM, SAST/DAST, and more
• Background in DevSecOps practices, with experience integrating security into CI/CD pipelines

Benefits and Perks

• Competitive compensation package, with opportunities for professional growth and development
• Flexible remote work arrangements, with the ability to work from anywhere
• Access to cutting-edge security tools and technologies, with opportunities for training and development
• Collaborative and dynamic work environment, with a talented team of security professionals
• Opportunities for career advancement, with a clear path for professional growth and development
• Comprehensive benefits package, including health insurance, retirement planning, and more
• Generous paid time off, with opportunities for flexible work arrangements and work-life balance

• Highlight your experience in cloud security, DevSecOps, and compliance frameworks to stand out as a candidate.
• Emphasize your ability to work collaboratively in distributed teams, with strong communication skills and problem-solving abilities.
• Showcase your knowledge of security tools and technologies, such as vulnerability scanners, SIEM, CSPM, SAST/DAST, and more.
• Be prepared to discuss your experience with identity and access management (IAM), single sign-on (SSO), multi-factor authentication (MFA), and zero-trust architectures.
• Research the company and the role, and be prepared to ask informed questions during the interview process.
• Consider creating a portfolio of your work, highlighting your experience and achievements in cloud security and DevSecOps.
• Be prepared to negotiate your salary and benefits package, and consider seeking advice from a career coach or mentor.