Associate Security Software Engineer

SailPoint is hiring an Associate Security Software Engineer to build custom security tools, middleware, and integrations across its security platforms. The role also supports security automation, internal interfaces and dashboards, and secure, policy-driven solutions in collaboration with Security Operations, IT, and Engineering.

Responsibilities:

• Develop, test, and maintain robust, scalable custom security tools, middleware, and automation scripts that integrate isolated security platforms (e.g., Identity/Entra ID, MDM/Intune, EDR, SIEM, and SaaS apps)
• Utilize API methodologies (REST, GraphQL, Webhooks) to create tool-agnostic data flows, enabling automated enforcement and telemetry sharing across the security stack
• Assist in identifying limitations in out-of-the-box vendor capabilities (such as custom mobile application management enforcement or complex access workflows) and contribute to building custom software to close those gaps
• Develop and support intuitive user interfaces (UIs) and dashboards for internal security tools, ensuring they are accessible and highly usable for Security Operations and business personnel
• Support and help maintain automated deployment pipelines for security controls, incident response playbooks (SOAR), and continuous monitoring workflows
• Work with internal stakeholders to understand requirements, translating security policies into automated, code-driven solutions
• Ensure custom development follows strict information security, secure coding (SSDLC), and compliance standards (e.g., ISO, NIST, SOX, etc.)

Requirements:

• 2-4 years of experience in software engineering, security automation, or DevOps, specifically focused on building internal tools or integrations
• Experience with full-stack development, including working knowledge of modern frontend frameworks (e.g., React, Vue, or Angular) to build responsive web applications
• Solid proficiency in languages suited for API integration and automation (e.g., Python, Go, or Node.js)
• Hands-on experience working with APIs, OAuth/OIDC authentication flows, webhooks, and building integration layers
• Familiarity with hosting custom tooling in cloud environments (preferably AWS), utilizing serverless architectures (Lambda) or containerization (Docker/Kubernetes)
• Solid understanding of foundational enterprise security concepts, particularly Identity & Access Management (IAM), Zero Trust, and Endpoint/Mobile Security (MAM/MDM)
• Experience or familiarity with CI/CD release automation (Jenkins, GitLab CI, GitHub Actions), Infrastructure as Code (Terraform), and system debugging
• Strong interpersonal and teaming skills - ability to work collaboratively within cross-functional teams
• Ability to operate in an agile, fast-paced environment