Job details
Domain
Performance and Support
Job field / Job profile
IT - Cybersecurity expert
Job title
Business Systems Security Engineer M/F
Employment type
Permanent
Professional category
Employees / Staff
Part time / Full time
Full-time
Job description
Safran is seeking a Business Systems Security Engineer to help protect and strengthen the security of our enterprise business applications, including Salesforce, SAP, and other critical business platforms. Reporting to the Cybersecurity Manager, this role will work closely with the Cybersecurity, IT, and Business Systems teams, and application owners to identify and mitigate security risks, implement security best practices, and ensure the confidentiality, integrity, and availability of business-critical information.
The position will also play a key role in enabling the secure adoption of emerging technologies, including artificial intelligence (AI), automation, and integrations between enterprise applications, while supporting the organization's broader cybersecurity strategy and compliance objectives.
The Day to Day:
• Secure Enterprise Business Applications: Assess and strengthen the security of Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
• Security Monitoring and Integration: Integrate security logs, audit trails, and threat signals from enterprise business applications, including Salesforce, SAP, and other SaaS platforms, into existing security monitoring solutions such as SIEM and XDR. Develop and enhance detection capabilities, identify suspicious activities, and collaborate with Cybersecurity teammates to improve threat visibility, incident investigation, and response across business systems.
• Enable Secure AI Adoption: Evaluate and support the secure integration of AI-powered tools, assistants, and automation into business systems, addressing risks related to sensitive data exposure, application permissions, third-party connectivity, and AI governance.
• Protect Application Integrations and Data: Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
• Drive Security Assessments and Risk Reduction: Conduct application security reviews, assess third-party solutions, identify vulnerabilities and configuration weaknesses, and collaborate with application owners and vendors to implement effective remediation strategies.
• Collaborate and Innovate: Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into new projects, system implementations, and technology initiatives while supporting incident investigations, compliance requirements, and continuous security improvements.
Candidate skills & requirements
What you Bring to Safran:
• Education and Experience: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. Typically 5-7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
• Enterprise Application Security Expertise: Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms. Strong understanding of role-based access control (RBAC), least privilege, privileged access management, application security configurations, and data protection principles.
• Identity, Integration, and Cloud Security Skills: Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management. Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
• AI Security and Risk Management: Understanding of generative AI technologies, large language models (LLMs), and the security risks associated with AI-enabled business applications, including data leakage, prompt injection, excessive permissions, and third-party AI integrations. Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10 is beneficial.
• Certifications and Professional Skills: Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300 are desirable. Salesforce certifications, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility, are highly valued. SAP security-related certifications are also beneficial. Strong analytical, problem-solving, communication, and cross-functional collaboration skills are essential.
Annual salary
$90k-$110k Annual
Job location
Job location
North America, United States, New York
City (-ies)
45 Becker Road, Suite A West Henrietta 14586 New York
Applicant criteria
Minimum education level achieved
Associate Degree
Minimum experience level required
More than 5 years
ITAR Controlled Position: Select "Yes" if role requires U.S. citizenship/permanent residency
Yes
