SaaS Security Data Analyst

Job Summary

India: SaaS Security Data Analyst Overview We seek two hands-on Security Engineers to advance privileged-access modernization and validate remediation of offensive-security findings across enterprise workloads. The engineers will be embedded in the Security organization and partner with Engineering, Platform, and Infrastructure teams in India and the United States. This role requires strong software development, API, Linux/SSH, and security-engineering fundamentals.

Responsibilities

• Privileged Access Management: Support configuration, deployment, and workload onboarding for Okta Privileged Access (OPA).
• Help migrate legacy root-based and shared-credential access to identity-based privileged access.
• Configure and troubleshoot OPA SSH workflows across application and infrastructure teams.
• Partner with Bangalore and US-based PAM and engineering teams.
• Engineering Enablement: Guide teams adopting secure OPA-based SSH access for production workloads.
• Document onboarding procedures, operational standards, and secure access patterns.
• Support teams through transitions to centralized privileged-access controls.
• Security Validation: Work under the Principal Offensive Security Engineer to validate remediation of red-team and offensive-security findings.
• Re-test vulnerabilities, confirm control effectiveness, and provide actionable feedback.
• Ensure findings are closed with appropriate controls and maintain validation records.

Required Skills

• Security foundations: authentication and authorization, PAM, SSH, Linux access controls, sudo, key management, identity-based access, network segmentation, and secure design.
• Development: proficiency in Python, Go, Java, or Node.js; REST APIs and API authentication; SaaS integrations; scripting or lightweight automation.
• Infrastructure: strong Linux administration; AWS and/or Azure; workload onboarding and server configuration. Infrastructure-as-code knowledge is preferred.
• Security testing: ability to interpret vulnerability and red-team findings and validate remediation of access-control, privilege-escalation, SSH/key-management, identity, and authentication issues.

Qualifications

• 4-8 years in security engineering, platform engineering, or DevSecOps.
• Experience with privileged-access tools, preferably OPA; CyberArk or BeyondTrust are relevant alternatives.
• Production SSH access-control experience and collaboration across global teams.
• Clear written and verbal communication with US-based partners.

Preferred Qualifications

• Okta or OPA experience.
• Exposure to red-team operations or offensive-security programs.
• Enterprise-scale environment experience.
• Relevant certifications, such as OSCP/OSWE, Security+, CISSP Associate, or cloud-security credentials.

Candidate Profile

• A practical security engineer-not policy or GRC focused-who can independently configure, troubleshoot, and validate technical controls.
• The candidate should be detail-oriented, collaborative, and able to overlap at least three to four hours with US Pacific time.

Job Type

• Contract, 6-month assignment.
• Remote is fine; occasional trips to the office for training (once a month).
• Shift will start at 3:30am Pacific (4:00 PM IST).

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.