Senior Security Engineer

B&H Photo is seeking a Senior Security Engineer (Security Engineer L3) onsite in New York, NY. This senior technical role focuses on designing, implementing, securing, and continuously improving technologies that protect the enterprise environment.

Role Overview

The position covers security architecture and engineering across network, cloud, identity and access, endpoint and network protections, threat detection capabilities, and infrastructure security. The Senior Security Engineer also serves as a technical owner for assigned platforms, supports security incident response and investigations, and contributes to security risk visibility through metrics and reporting.

Key Responsibilities

• Design, implement, and maintain enterprise security controls across network, cloud, endpoint, identity, application, and infrastructure environments.
• Evaluate, deploy, configure, integrate, and manage security technologies throughout their lifecycle.
• Develop secure architectures and technical standards aligned with industry best practices and business objectives.
• Partner with infrastructure, cloud, and application teams to embed security into initiatives and operational processes.
• Translate business requirements into secure and scalable technical solutions.
• Act as the technical owner for assigned security platforms, ensuring stability, effectiveness, and continuous improvement.
• Maintain and optimize technologies including SIEM, SOAR, EDR, NDR, XDR, firewalls, WAFs, DLP, vulnerability management platforms, and other enterprise security tools.
• Monitor platform health, performance, availability, and capacity to keep security systems operational and effective.
• Coordinate upgrades, migrations, integrations, and security technology lifecycle management activities.
• Serve as a senior escalation point during security incidents, infrastructure outages, and other high-impact operational events.
• Support incident investigations through engineering expertise, forensic analysis, and technical troubleshooting.
• Perform root cause analysis and develop corrective actions to prevent recurring incidents.
• Monitor emerging threats, vulnerabilities, attack techniques, and industry trends to strengthen defenses.
• Recommend and implement security improvements based on incident lessons learned and threat intelligence.
• Secure cloud environments across Microsoft Azure, Microsoft 365, AWS, and other enterprise platforms.
• Implement and maintain identity security controls, authentication systems, privileged access controls, and modern access management solutions.
• Support Zero Trust initiatives through improved authentication, authorization, network segmentation, and security monitoring.
• Design and enforce secure configurations for cloud and hybrid infrastructure environments.
• Develop and support security automations to improve operational efficiency, threat detection, incident response, and compliance reporting.
• Identify workflow improvements, eliminate manual processes, and enhance security program maturity.
• Create and maintain technical documentation, standards, procedures, and platform roadmaps.
• Evaluate emerging technologies and recommend security investments to improve organizational security posture.
• Support security compliance initiatives and audit readiness across applicable regulatory and industry frameworks.
• Assist with remediation of security findings, control deficiencies, and identified risks.
• Conduct security assessments and participate in risk evaluations for new technologies, projects, and vendor relationships.
• Develop reporting and metrics to communicate security performance and risk to leadership.

Required Qualifications

• 6+ years of experience in cybersecurity engineering, security operations, infrastructure engineering, or a related discipline.
• Strong experience implementing and supporting enterprise security technologies across multiple security domains.
• Deep understanding of network security, endpoint security, identity security, cloud security, encryption technologies, authentication mechanisms, and modern security architecture principles.
• Experience with enterprise security platforms including SIEM, SOAR, EDR/XDR, vulnerability management, DLP, firewalls, and application security tools.
• Strong understanding of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Ability to troubleshoot complex technical issues and lead remediation across multiple technology domains.
• Excellent communication skills to explain technical concepts, risks, and recommendations to technical and non-technical stakeholders.

Technologies and Standards

SIEM, SOAR, EDR, NDR, XDR, Firewalls, WAFs, DLP, vulnerability management platforms, Microsoft Azure, Microsoft 365, AWS, Zero Trust, NIST CSF, NIST 800-53, ISO 27001, CIS Controls, MITRE ATT&CK, encryption technologies, authentication mechanisms, privileged access controls

Preferred Qualifications

• Experience securing Microsoft Azure, Microsoft 365, AWS, or other cloud environments.
• Experience supporting compliance programs such as PCI DSS, SOX, HIPAA, or CMMC.
• Experience conducting risk assessments and security architecture reviews.
• Industry certifications such as CISSP, CISM, GCIH, GCIA, Security+, CEH, or equivalent.
• Experience developing security automation, scripting, and orchestration workflows.

Benefits

• Competitive salaries
• Medical benefits
• A 401K plan
• Employee discounts
• Opportunities to grow within a high-energy, low-attitude environment

How Success Is Measured

• Trusted ownership of critical security platforms through effective engineering and architecture decisions.
• Reduced organizational risk through improvements that enhance security technology performance and maturity.
• Recognition as a subject matter expert and reliable escalation resource contributing to the long-term cybersecurity roadmap.

Compensation and Location

USD 150,000 per year. Role is onsite in New York, NY.