Business Systems Security Engineer

Safran•West Henrietta, NY

8d•Hybrid

About The Position

Safran is seeking a Business Systems Security Engineer to protect and strengthen enterprise business applications, including Salesforce, SAP, and other critical platforms. Reporting to the Cybersecurity Manager, the role works with Cybersecurity, IT, Business Systems teams, application owners, and business stakeholders to identify and mitigate security risks, implement security best practices, and protect the confidentiality, integrity, and availability of business-critical information. The engineer also supports secure adoption of AI, automation, and integrations between enterprise applications, contributing to the organization’s cybersecurity strategy and compliance objectives. The position is based at Safran Trusted 4D in West Henrietta, New York, and is hybrid with a minimum of three days onsite. The site develops and manufactures resilient positioning, navigation, and timing technology, including synchronization clocks and GNSS simulators, for defense and commercial applications.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
Typically 5–7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms.
Strong understanding of role-based access control (RBAC), least privilege, privileged access management, application security configurations, and data protection principles.
Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management.
Strong analytical, problem-solving, communication, and cross-functional collaboration skills.

Nice To Haves

Familiarity with cloud environments, application integrations, security logging, and automation technologies.
Understanding of generative AI technologies, large language models (LLMs), and security risks in AI-enabled business applications, including data leakage, prompt injection, excessive permissions, and third-party AI integrations.
Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10.
Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300.
Salesforce certifications, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility.
SAP security-related certifications.

Responsibilities

Assess and strengthen Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
Integrate security logs, audit trails, and threat signals from enterprise applications and SaaS platforms into security monitoring solutions such as SIEM and XDR.
Develop and enhance detection capabilities, identify suspicious activities, and collaborate on threat visibility, incident investigation, and response across business systems.
Evaluate and support secure integration of AI-powered tools, assistants, and automation into business systems, addressing sensitive data exposure, application permissions, third-party connectivity, and AI governance risks.
Review and secure APIs, service accounts, application registrations, and data exchanges, ensuring appropriate authentication, authorization, encryption, and data protection controls.
Conduct application security reviews and third-party assessments, identify vulnerabilities and configuration weaknesses, and collaborate with application owners and vendors on remediation.
Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into projects, system implementations, and technology initiatives.
Support incident investigations, compliance requirements, and continuous security improvements.