Business Systems Security Engineer

Safran is looking for a Business Systems Security Engineer to help protect and strengthen enterprise business applications, including Salesforce and SAP. This onsite role in West Henrietta, NY focuses on finding security risks early, improving security monitoring across business systems, and supporting secure adoption of emerging technologies, including AI.

What you’ll do

• Assess and enhance security for Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
• Bring application telemetry into the security program by integrating logs, audit trails, and threat signals from enterprise business applications (including Salesforce, SAP, and other SaaS platforms) into existing SIEM and XDR monitoring solutions.
• Develop and improve detection capabilities by identifying suspicious activity and collaborating with cybersecurity teams to strengthen threat visibility, support incident investigations, and improve response across business systems.
• Evaluate and support secure integration of AI-powered tools, assistants, and automation, focusing on risks like sensitive data exposure, application permissions, third-party connectivity, and AI governance.
• Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
• Run application security reviews and assess third-party solutions to identify vulnerabilities and configuration weaknesses, working with application owners and vendors to drive effective remediation.
• Partner with Cybersecurity, IT, and Business Systems stakeholders to embed security into new projects, system implementations, and technology initiatives, including support for incident investigations, compliance requirements, and continuous security improvements.

What you bring

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Typically 5–7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
• Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or similar SaaS/ERP platforms.
• Strong understanding of RBAC, least privilege, privileged access management, application security configurations, and data protection principles.
• Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management.
• Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
• Understanding of generative AI, large language models (LLMs), and AI-related security risks such as data leakage, prompt injection, excessive permissions, and third-party AI integrations.
• Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10 is beneficial.
• Relevant certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300 are desirable.
• Salesforce certifications are highly valued, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility. SAP security-related certifications are also beneficial.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.

Compensation

$90,000 - $110,000 per year.