Safran is seeking a Business Systems Security Engineer to help protect and strengthen critical enterprise business applications, including Salesforce and SAP. This onsite role in West Henrietta, NY focuses on identifying security risks, improving security controls, and ensuring secure adoption of new technologies across business systems, including AI.
You will work at the intersection of enterprise applications and security operations by connecting security monitoring with the audit trails, logs, and threat signals that come from these platforms. The position also includes supporting secure integrations, reviewing third-party solutions, and partnering across Cybersecurity, IT, Business Systems, and business stakeholders to embed security into ongoing initiatives.
Key Responsibilities
- Assess and strengthen the security of Salesforce, SAP, and other enterprise platforms using secure configuration practices, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
- Integrate security logs, audit trails, and threat signals from enterprise business applications, including Salesforce, SAP, and other SaaS platforms, into existing monitoring solutions such as SIEM and XDR.
- Develop and enhance detection capabilities by identifying suspicious activity and collaborating with Cybersecurity teammates to improve threat visibility, incident investigation, and response across business systems.
- Evaluate and support secure integration of AI-powered tools, assistants, and automation, addressing risks around sensitive data exposure, application permissions, third-party connectivity, and AI governance.
- Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
- Conduct application security reviews, assess third-party solutions, identify vulnerabilities and configuration weaknesses, and work with application owners and vendors to implement remediation strategies.
- Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into new projects and system implementations, while supporting incident investigations, compliance requirements, and continuous security improvements.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
- Typically 5–7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
- Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms.
- Strong understanding of RBAC, least privilege, privileged access management, application security configurations, and data protection principles.
- Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management.
- Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
- Understanding of generative AI technologies, LLMs, and AI-enabled business application risks including data leakage, prompt injection, excessive permissions, and third-party AI integrations.
- Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10 is beneficial.
- Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300 are desirable.
- Salesforce certifications including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility are highly valued.
- SAP security-related certifications are also beneficial.
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills are essential.
Technologies
- Salesforce, SAP, Microsoft 365
- SIEM, XDR
- Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML
- API security
- ISO 27001/27002, NIST CSF, OWASP Top 10
- CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, Microsoft SC-300
- Salesforce Certified System Architect, Salesforce Certified Application Architect
- AI, generative AI, large language models (LLMs)
- RBAC, privileged access management, OAuth
Salary: USD 90,000 - 110,000 per year.
Location: West Henrietta, NY (onsite).
