Job Description
Note: The job is a remote job and is open to candidates in USA. Symosis Security is a boutique cybersecurity firm focused on security engineering, SaaS risk automation, and AI/ML security. They are seeking a Senior Security Engineer to support a high-impact enterprise SaaS security program, combining architecture-level security reviews with hands-on security engineering and automation.
- Responsibilities
- Lead architecture reviews for new suppliers and major system changes
- Create Data Flow Diagrams (DFDs), identify trust boundaries, and perform structured threat modeling (e.g., STRIDE)
- Evaluate OAuth/OIDC authentication models, API exposure, RBAC design, logging controls, and integration risks
- Identify security gaps and provide clear, actionable remediation guidance
- Engage directly with engineering and product teams in technical discussions
- Build and maintain secure, read-only API integrations for enterprise SaaS platforms
- Extract and normalize configuration and security telemetry (RBAC, MFA/SSO, API keys, audit logs)
- Handle real-world API concerns including pagination, rate limiting, token refresh, and error handling
- Contribute to data pipelines (Databricks or similar platforms)
- Implement security rule logic aligned to enterprise standards
- Support operational dashboards and reporting workflows
- Skills
- 5+ years in Security Engineering, Product Security, Cloud Security, or Application Security
- Hands-on experience conducting formal threat modeling and architecture risk assessments
- Strong understanding of OAuth/OIDC, API security, RBAC, and SaaS configuration controls
- Proven engineering experience with: Python
- REST APIs
- JSON-based integrations
- Data pipelines and schema normalization
- Experience building production-grade API connectors
- Ability to independently lead technical conversations with engineering teams
- Experience with enterprise SaaS environments
- Familiarity with Databricks, Azure, or similar data platforms
- Exposure to AI/ML security concepts
- Company Overview
- Symosis Security is a security, privacy, risk, and compliance consulting firm. It was founded in 2004, and is headquartered in Phoenix, Arizona, USA, with a workforce of 11-50 employees. Its website is https://www.symosis.com.
- Company H1B Sponsorship
- Symosis Security has a track record of offering H1B sponsorships, with 2 in 2022, 1 in 2021. Please note that this does not guarantee sponsorship for this specific role.
Apply tot his job
Apply To this Job