Senior Security Engineer

AppOmni prevents SaaS data breaches by delivering end-to-end SaaS security. Our platform gives security teams clear visibility into posture, access, third-party connections, AI-related activity, and with built-in discovery to identify unsanctioned SaaS and Shadow AI tools. Backed by continuous monitoring and real-time threat detection, AppOmni helps enterprises identify and resolve risks early, keeping their SaaS applications secure. Recognized as a Frost Radar™ 2025 Leader and Great Place To Work ® , AppOmni continues to set the standard for innovation and customer value in SaaS security. The largest and fastest-growing global enterprises across industries trust AppOmni to secure their SaaS applications. About the Role AppOmni is looking for a Senior SaaS Security Engineer to design and develop the security content that powers our platform’s ability to identify risk across SaaS environments. In this role, you will work at the intersection of security research, detection engineering, and product development —translating deep knowledge of SaaS platforms into high-quality detections, posture checks, and security insights. You will help define how we identify misconfigurations, risky behaviors, identity threats, and emerging SaaS attack techniques across a wide range of applications. This is a hands-on individual contributor role focused on building scalable, high-fidelity security content. You will partner closely with Product and Engineering to ensure detections and insights are accurate, actionable, and aligned with real-world customer environments. What You’ll Do Design and develop detection logic and security rules to identify threats, suspicious behaviors, and misconfigurations across SaaS applications. Research SaaS platforms (e.g., Google Workspace, Microsoft 365, Salesforce, Slack, etc.) to understand security models, APIs, and potential attack surfaces. Translate real-world attack techniques and SaaS security risks into scalable product capabilities, including detections, posture checks, and risk signals. Contribute to both threat detection and posture management content, ensuring broad coverage across identity, access, integrations, and data exposure risks. Analyze large-scale SaaS telemetry to identify patterns, anomalies, and opportunities for new detections or improvements. Continuously improve detection quality by reducing false positives and ensuring signals are actionable for customers. Collaborate with Engineering to productionize detection logic and ensure reliable execution at scale. Partner with Product to shape how security insights are surfaced, prioritized, and explained to users. Stay current on emerging SaaS attack techniques, identity threats, OAuth risks, and AI-related security considerations. Contribute to internal knowledge sharing and help elevate SaaS security expertise across the organization. What We’re Looking For 5–8+ years of experience in cybersecurity, with hands-on work in areas such as detection engineering, threat research, security analytics, or cloud/SaaS security. Strong understanding of SaaS security concepts, including identity and access management, OAuth integrations, third-party app risks, and misconfiguration-driven exposure. Experience working with security telemetry and logs, including querying and analyzing large datasets (e.g., SQL, Python, or similar tools). Experience developing or tuning detection logic, rules, or analytics in a SIEM, XDR, or similar system. Familiarity with SaaS application APIs and security-relevant data sources. Understanding of attacker techniques in SaaS environments, including identity-based attacks, privilege escalation, and persistence mechanisms. Ability to translate complex technical findings into clear, actionable security insights. Experience balancing detection fidelity, coverage, and performance in production systems. Experience partnering with Product and Engineering to deliver customer-facing security capabilities. Strong analytical thinki