Business Systems Security Engineer

Safran•Town of Henrietta, NY

10d•$90,000 - $110,000•Hybrid

About The Position

Safran is seeking a Business Systems Security Engineer to help protect and strengthen enterprise business applications, including Salesforce, SAP, and other critical business platforms. Reporting to the Cybersecurity Manager, the role works closely with Cybersecurity, IT, Business Systems teams, and application owners to identify and mitigate security risks, implement security best practices, and protect the confidentiality, integrity, and availability of business-critical information. The position also supports secure adoption of emerging technologies, including AI, automation, and integrations between enterprise applications, in alignment with the organization’s cybersecurity strategy and compliance objectives. The role is based at Safran Trusted 4D’s West Henrietta, New York site in a hybrid arrangement, with at least three days onsite. Safran Trusted 4D develops resilient positioning, navigation, and timing technology and manufactures synchronization clocks and GNSS simulators for defense and commercial applications.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
Typically 5–7 years of experience in cybersecurity, enterprise application security, identity and access management, or a related technical discipline.
Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS or ERP platforms.
Strong understanding of role-based access control, least privilege, privileged access management, application security configurations, and data protection principles.
Working knowledge of Microsoft Entra ID, single sign-on, multifactor authentication, OAuth 2.0, OpenID Connect, SAML, API security, and service account management.
Strong analytical, problem-solving, communication, and cross-functional collaboration skills.

Nice To Haves

Familiarity with cloud environments, application integrations, security logging, and automation technologies.
Understanding of generative AI technologies, large language models, and AI-enabled business application risks, including data leakage, prompt injection, excessive permissions, and third-party AI integrations.
Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10.
Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300.
Salesforce certifications such as Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility.
SAP security-related certifications.

Responsibilities

Assess and strengthen security of Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
Integrate application security logs, audit trails, and threat signals from enterprise applications and SaaS platforms into SIEM and XDR solutions.
Develop and enhance threat detection capabilities, identify suspicious activity, and work with Cybersecurity teammates on threat visibility, investigation, and response across business systems.
Evaluate and support secure integration of AI-powered tools, assistants, and automation into business systems, addressing sensitive data exposure, permissions, third-party connectivity, and AI governance risks.
Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
Conduct application security reviews and third-party solution assessments; identify vulnerabilities and configuration weaknesses; and collaborate with application owners and vendors on remediation.
Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into projects, system implementations, and technology initiatives.
Support incident investigations, compliance requirements, and continuous security improvements.