CISSP and cloud security certifications preferred.
Responsibilities
Demonstrate mastery of 1 security domain from the CISSP CBK.
Manage identification, prioritization, and remediation of security vulnerabilities and threats.
Evaluate and utilize security technologies and tools, including Network Security, IAM, IDS/IPS, WAF, SIEM, DLP, VM, EDR.
Assess potential threats and risks to systems, driving remediation with partners.
Collaborate on cross-functional projects to address security concerns throughout the project lifecycle.
Track security events and incidents from detection to resolution.
Develop and maintain strategic relationships with IT and business partners.
Benefits
Comprehensive rewards including medical coverage, virtual wellness classes, and tuition reimbursement.
Paid time off, company holidays, and work-life balance programs.
Award-winning training and development programs for career growth.
Company culture that values diversity and encourages employee voices.
Paid time off for volunteerism and support for community initiatives.
Full Job Description
Overview
As a Security Engineer, you will provide hands-on technical support for securing modern technologies and platforms, while developing security requirements & best-practice guidance to ensure the business maintains a competitive security posture. A Security Engineer is also responsible for collaborating with our IT partners on business initiatives and recommending secure design solutions to protect against known security threats and misconfigurations. An ideal candidate will have a bachelor's degree in Information Security, or a related field, and have demonstrated mastery of 2 security domains as outlined within the CISSP CBK (Security & Risk Management, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Assessment & Testing, Security Operations, Software Development Security). In addition, you must have excellent written and oral communication skills, be successful working on a team collaboratively, and understand foundational IT concepts. CISSP and cloud security certifications are preferred. Responsibilities
Demonstrated mastery of 1 security domain as outlined within the CISSP CBK (Security & Risk Management, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Assessment & Testing, Security Operations, Software Development Security).
Manage Identification, prioritization, and remediation guidance of security vulnerabilities & threats.
Manage the evaluation and use of security technologies and tools, including, but not limited to technologies for Network Security, IAM, IDS/IPS, WAF, SIEM, DLP, VM, EDR, etc.
Manage the assessment of potential threats and risks to systems and technologies, driving remediation with internal and external partners.
Collaborate on cross functional projects inside and outside of Enterprise Security to ensure that security concerns are addressed throughout the project life cycle. Ensures security projects are delivered on time and on budget.
Strong Understanding of technological trends and developments in technology.
Track security events and incidents from initial detection through final resolution.
Develop and maintain strategic relationships with IT and business partners, while leading through influence.
Ability to effectively present & interact with various levels of senior leadership.
Manage approval, tracking and reporting any security exceptions as the need arises.
Strong Understanding of information security risks, threats, and controls.
Strong Understanding of secure coding standards, best practices, and SecDevOps.
Strong Understanding of cloud platforms and how to properly implement security best practices.
Understanding of core IT concepts and functions.
Qualifications
Bachelor's Degree in Information Security, Software Development, or another related technical discipline. - Preferred
7 years of experience in Information Security, Cyber Security.
2 years of experience in Object oriented programming languages: C#, Java,.Net, Python or JavaScript. Knowledge of back-end frameworks such as Spring,.NET, or Node, as well as familiarity with modern front-end frameworks such as Angular or React.
Certified Cloud Security Professional (CCSP), Professional Cloud Security Engineer by Google, Offensive Security, Certificate of Cloud Security Knowledge (CCSK), Microsoft Certified Azure Security Engineer Associate (AZ-500), AWS Certified Security - Specialty - Preferred
Information Technology - Preferred
Management - Preferred
Communication - Preferred
Troubleshooting (Problem Solving) - Preferred
Wireless Communications - Preferred
Network Security - Preferred
Enterprise Security - Preferred
Firewall - Preferred
Incident Response - Preferred
Security Engineering - Preferred
Paychex - Preferred
Security Systems - Preferred
Proxy Servers - Preferred
Python (Programming Language) - Preferred
Security Controls - Preferred
Live the Paychex Values
Act with uncompromising integrity.
Provide outstanding service and build trusted relationships.
Drive innovation in our products and services and continually improve our processes.
Work in partnership and support each other.
Be personally accountable and deliver on commitments.
Treat each other with respect and dignity.
What's in it for you?
We value your well-being: We provide over 21 comprehensive rewards, including medical coverage, virtual wellness classes, tuition reimbursement, 401(k) + employer match, adoption assistance, financial assistance, and much more.
We value your time: From paid time off to company holidays, culture days, and comprehensive work-life balance programs, we will ensure you have the flexibility you need to be your best.
We value your development: Our award-winning training and development programs empower our employees with ongoing learning opportunities to give you the building blocks to grow your career.
We value your perspective: Our company culture reflects the diversity of our employees. We want you to be you and your voice to be heard.
We value our communities: We offer paid time off for volunteerism and promote many company-wide and local initiatives that benefit organizations you care about.
Note: The benefits described apply to full-time employees. Benefits for part-time, contract, and intern roles may vary.
Not sure if you meet every requirement?
At Paychex, we know that great talent comes in many forms. If you're passionate about the role but don't check every box, we still encourage you to apply. You might be the right fit - either for this position or another opportunity with us.
About Paychex
Paychex, Inc. is a leading provider of integrated human capital management solutions for payroll, benefits, human resources, and insurance services. By combining its innovative software-as-a-service technology and mobility platform with dedicated, personal service, Paychex empowers small- and medium-sized business owners to focus on the growth and management of their business. Paychex is headquartered in Rochester, New York and has more than 100 locations across the United States and Europe.
