Senior App Security Engineer

SaaS Platform Expertise:

• Hands-on experience with enterprise SaaS platforms: Salesforce, Zendesk, Slack, ServiceNow, HubSpot, Google Workspace, Microsoft 365
• Deep understanding of SaaS security configurations, admin controls, and permission models
• Experience with platform-specific security features (e.g., Salesforce Shield, Event Monitoring)

Security Assessment Capabilities:

• OAuth 2.0, SAML 2.0, and SSO implementation analysis
• API security assessment (REST, webhooks, authentication mechanisms)
• Data flow mapping and sensitive data identification
• Integration security analysis (third-party apps, OAuth scopes, token management)
• Risk assessment methodologies and risk rating frameworks
• Access control evaluation (RBAC, privilege escalation, least privilege)

Technical Tools & Analysis:

• API testing tools (Burp Suite, Postman, cURL)
• Browser developer tools for OAuth/token analysis
• Scripting/automation (Python or PowerShell)
• SIEM platforms (Splunk, Datadog, or similar)
• Network traffic analysis and log review
• Data visualization and diagramming tools