Operational Security Engineer - SSPM (SaaS Security Posture Management)

Project overview

Context:

We are looking for an expert in data security and SSPM (SaaS Security Posture Management), with an engineering degree or equivalent, to support our client in strengthening the security of SaaS environments and protecting sensitive data.

Overall objective: Act as a Data Security & SSPM (SaaS Security Posture Management) Expert

Strong project constraint

Work in collaboration with teams in AMER, APAC, EMEA

MISSIONS

As part of an expert team, the profile will primarily be responsible for supporting the client in the opportunity study, evaluation, and implementation of an SSPM solution, focusing on the security risks and use cases identified within the organization.

Main activities

As part of their mission, the expert will be responsible for the following activities:

SSPM Opportunity Study

Market Study and POC

Implementation and Continuous Improvement

Contribution to Data Security Activities

In addition to SSPM activities, the contractor may be involved in other service activities, including:

Profile and required skills

The deliverables are

Profile sought

Technical skills

Language skills

Technical and methodological skills

Business Expertise & Soft Skills

Work environment

• Identify and formalize the main risks that can be covered by an SSPM: SaaS misconfigurations, identities, privileges, permissions, third-party applications, etc.
• Develop an opportunity dossier to assess the relevance and value of implementing an SSPM for the client.
• Identify complementarities with existing data security, IAM, DSPM, and Microsoft 365 systems.
• Conduct a study of the SSPM market to identify solutions that best meet the client's risks and needs.
• Define evaluation criteria and propose a shortlist of solutions.
• Prepare and conduct POCs with the selected solutions.
• Analyze the results and produce a recommendation to guide the client's choice.
• Support, where applicable, the deployment and integration of the selected SSPM solution.
• Define and optimize security and detection rules.
• Analyze and prioritize identified risks.
• Contribute to monitoring remediation actions.
• Define and maintain SaaS security posture management indicators.
• Microsoft 365 tenant security;
• Campaign execution and monitoring;
• DSPM projects and activities;
• Microsoft Purview and access governance topics;
• More broadly, any other Data Security project led by the team.
• Management of solutions in RUN
• Deployment of security solutions
• Risk and security analysis
• Security Architecture
• Confirmed
• Mandatory
• Data Security
• Operational Security
• Important
• French Fluent (Mandatory)
• Professional English (Mandatory)
• SSPM / SaaS Security: good knowledge of SaaS environment security posture issues and market SSPM solutions.
• Data Security: solid skills in data protection, risk analysis, and information leakage or overexposure issues.
• Microsoft: good knowledge of Microsoft 365, Entra ID, Microsoft Graph, and Microsoft Purview.
• Identities and Access: mastery of IAM, privileges, permissions, and connected applications issues.
• DSPM: good understanding of associated solutions and use cases.
• Studies and POCs: ability to conduct cybersecurity solution benchmarks, define use cases, and conduct POCs.
• Strong general knowledge in IS Security / Cybersecurity and Data Security.
• Analytical and synthesis skills.
• Ability to identify appropriate solutions based on business and technical risks.
• Autonomy and ability to challenge vendor proposals.
• Writing rigor to produce decision-support documents.
• Ability to work in a team within a complex multi-entity environment.

Project details

• Start: ASAP
• Duration: 18 mois
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French, English