Security Engineer III

Paychex•May reside in any Paychex location, UNAVAILABLE

14h

About The Position

As a Security Engineer, you will provide hands-on technical support for securing modern technologies and platforms and develop security requirements and best-practice guidance to help maintain the business’s security posture. You will collaborate with IT partners on business initiatives and recommend secure design solutions to protect against known security threats and misconfigurations. The role includes evaluating security technologies, assessing and addressing threats and vulnerabilities, tracking security incidents through resolution, and collaborating with partners across the business. You will also contribute to cross-functional security projects, maintain strategic relationships with IT and business partners, and communicate with senior leadership. The posting describes the role as Security Engineer III and lists seven years of information security or cybersecurity experience and two years of object-oriented programming experience among its qualifications.

Requirements

Seven years of experience in information security or cybersecurity.
Two years of experience with object-oriented programming languages such as C#, Java, .NET, Python, or JavaScript.
Bachelor’s degree in Information Security, Software Development, or another related technical discipline (listed as preferred).
Excellent written and oral communication skills and ability to work collaboratively on a team.
Understanding of foundational IT concepts and functions.
Demonstrated mastery of a security domain outlined in the CISSP Common Body of Knowledge (CBK).

Nice To Haves

Entry-level cybersecurity certification such as Security+, (ISC)² Associate, GSEC, or CEH.
CISSP certification.
Cloud security certification such as CCSP, Google Professional Cloud Security Engineer, Offensive Security, CCSK, Microsoft Azure Security Engineer Associate (AZ-500), or AWS Certified Security – Specialty.
Knowledge of back-end frameworks such as Spring, .NET, or Node and familiarity with modern front-end frameworks such as Angular or React.
Experience or skills in Information Technology, management, communication, troubleshooting/problem solving, wireless communications, network security, enterprise security, firewalls, incident response, security engineering, Paychex, security systems, proxy servers, Python, or security controls.

Responsibilities

Identify and prioritize security vulnerabilities and threats, and provide remediation guidance.
Manage the evaluation and use of security technologies and tools, including tools for network security, IAM, IDS/IPS, WAF, SIEM, DLP, vulnerability management, and EDR.
Assess potential threats and risks to systems and technologies and drive remediation with internal and external partners.
Collaborate on cross-functional projects within and outside Enterprise Security so security concerns are addressed throughout the project life cycle; help ensure security projects are delivered on time and on budget.
Track security events and incidents from initial detection through final resolution.
Develop and maintain strategic relationships with IT and business partners, leading through influence.
Present effectively and interact with various levels of senior leadership.
Manage approval, tracking, and reporting of security exceptions as needed.
Apply understanding of technology trends, information security risks, threats, and controls, secure coding standards, best practices, SecDevOps, cloud security practices, and core IT concepts.
Demonstrate mastery of a CISSP CBK security domain.