Senior Security Engineer

About the Role

AppOmni is looking for a Senior SaaS Security Engineer to design and develop the security content that powers our platform’s ability to identify risk across SaaS environments.

In this role, you will work at the intersection of security research, detection engineering, and product development—translating deep knowledge of SaaS platforms into high-quality detections, posture checks, and security insights. You will help define how we identify misconfigurations, risky behaviors, identity threats, and emerging SaaS attack techniques across a wide range of applications.

This is a hands-on individual contributor role focused on building scalable, high-fidelity security content. You will partner closely with Product and Engineering to ensure detections and insights are accurate, actionable, and aligned with real-world customer environments.

What You’ll Do

• Design and develop detection logic and security rules to identify threats, suspicious behaviors, and misconfigurations across SaaS applications.
• Research SaaS platforms (e.g., Google Workspace, Microsoft 365, Salesforce, Slack, etc.) to understand security models, APIs, and potential attack surfaces.
• Translate real-world attack techniques and SaaS security risks into scalable product capabilities, including detections, posture checks, and risk signals.
• Contribute to both threat detection and posture management content, ensuring broad coverage across identity, access, integrations, and data exposure risks.
• Analyze large-scale SaaS telemetry to identify patterns, anomalies, and opportunities for new detections or improvements.
• Continuously improve detection quality by reducing false positives and ensuring signals are actionable for customers.
• Collaborate with Engineering to productionize detection logic and ensure reliable execution at scale.
• Partner with Product to shape how security insights are surfaced, prioritized, and explained to users.
• Stay current on emerging SaaS attack techniques, identity threats, OAuth risks, and AI-related security considerations.
• Contribute to internal knowledge sharing and help elevate SaaS security expertise across the organization.

What We’re Looking For

• 5–8+ years of experience in cybersecurity, with hands-on work in areas such as detection engineering, threat research, security analytics, or cloud/SaaS security.
• Strong understanding of SaaS security concepts, including identity and access management, OAuth integrations, third-party app risks, and misconfiguration-driven exposure.
• Experience working with security telemetry and logs, including querying and analyzing large datasets (e.g., SQL, Python, or similar tools).
• Experience developing or tuning detection logic, rules, or analytics in a SIEM, XDR, or similar system.
• Familiarity with SaaS application APIs and security-relevant data sources.
• Understanding of attacker techniques in SaaS environments, including identi