Business Systems Security Engineer

Safran - Navigation & Timing; West Henrietta (NY); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Paid Time Off

Annual bonus

Medical, dental, and vision coverage

Health Savings Account (HSA) and Flex

401(k) with company matching

Gym membership reimbursement

Tuition reimbursement

Job summary

Safran Electronics & Defense is seeking a Business Systems Security Engineer in West Henrietta, NY, to protect and strengthen security across enterprise applications including Salesforce and SAP. The role reports to the Cybersecurity Manager and partners with Cybersecurity, IT, and Business Systems teams to mitigate risks and ensure confidentiality, integrity, and availability of critical information.

You will help enable secure AI adoption, secure integrations, and drive risk reduction while

Qualifications

• Bachelor’s degree or equivalent in cybersecurity/IT/CS or related field.
• 5–7 years of experience in cybersecurity, enterprise application security, IAM, or related discipline.
• Experience securing enterprise apps such as Salesforce, SAP, Microsoft 365 or similar SaaS/ERP.
• Strong knowledge of RBAC, least privilege, privileged access management, and data protection.
• Familiarity with cloud environments, app integrations, security logging, and automation tech.
• Desirable: certifications like Security+, CCSP, CISSP, SC-300; Salesforce/SAP security certs.

Responsibilities

• Secure and strengthen security of Salesforce, SAP, and other enterprise platforms through secure config, IAM, permissions, vulnerability management, and monitoring.
• Integrate security logs and threat signals into SIEM/XDR; enhance detection and incident response.
• Evaluate and enable secure AI adoption, addressing data exposure, permissions, third‑party AI integrations, and governance.
• Review and secure APIs, service accounts, app registrations, and data exchanges with proper auth and encryption.
• Conduct application security reviews, assess third‑party solutions, and drive remediation with owners and vendors.
• Collaborate with Cybersecurity, IT, Business Systems, and stakeholders to embed security into new projects and initiatives.

Skills

IAM

RBAC

MFA

APIs security

SAML

OAuth 2.0

OpenID Connect

SSO

Cloud security

AI security

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Microsoft Entra ID

SSO

MFA

OAuth 2.0

OpenID Connect

SAML

API security

Job description

We’re looking for a Business Systems Security Engineer to join our growing team in West Henrietta, NY.

This is a hybrid position with a minimum of 3 days onsite.

Who We Are

Part of Safran Electronics & Defense, our Trusted 4D Inc. site is the world leader in Resilient Positioning, Navigation and Timing (R‑PNT) technology that’s used in almost every device, vehicle, utility grid, and cell phone tower that we see today. We provide virtually fail‑safe GNSS and PNT solutions for defense and commercial applications worldwide. Simply put, we do work that matters, powering the systems people depend on every day.

Locally, we manufacture precise synchronization clocks for data centers called time servers, as well as GNSS simulators to help test PNT equipment before it launches – such as rockets or sports watches. Our products are used by some of the leading data center providers and space agencies in the world.

Our site is located in West Henrietta, New York, with an on‑site manufacturing facility and teams in engineering, R&D, sales and marketing, and more.

But above all, joining Safran means becoming part of an international high‑technology group in the aerospace, space, and defense sectors. Drawing strength from our differences and enriched by our complementarity, our 110,000 talents with unique career paths are shaping a safer, more sustainable aviation. With us, the diversity of our teams drives innovation to develop breakthrough technologies. We promote knowledge sharing and collaboration, encourage initiative, and celebrate creativity.

The Position

Safran is seeking a Business Systems Security Engineer to help protect and strengthen the security of our enterprise business applications, including Salesforce, SAP, and other critical business platforms. Reporting to the Cybersecurity Manager, this role will work closely with the Cybersecurity, IT, and Business Systems teams, and application owners to identify and mitigate security risks, implement security best practices, and ensure the confidentiality, integrity, and availability of business‑critical information.

The position will also play a key role in enabling the secure adoption of emerging technologies, including artificial intelligence (AI), automation, and integrations between enterprise applications, while supporting the organization’s broader cybersecurity strategy and compliance objectives.

The Day To Day

• Secure Enterprise Business Applications: Assess and strengthen the security of Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role‑based permissions, vulnerability management, and continuous security monitoring.
• Security Monitoring and Integration: Integrate security logs, audit trails, and threat signals from enterprise business applications, including Salesforce, SAP, and other SaaS platforms, into existing security monitoring solutions such as SIEM and XDR. Develop and enhance detection capabilities, identify suspicious activities, and collaborate with Cybersecurity teammates to improve threat visibility, incident investigation, and response across business systems.
• Enable Secure AI Adoption: Evaluate and support the secure integration of AI‑powered tools, assistants, and automation into business systems, addressing risks related to sensitive data exposure, application permissions, third‑party connectivity, and AI governance.
• Protect Application Integrations and Data: Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
• Drive Security Assessments and Risk Reduction: Conduct application security reviews, assess third‑party solutions, identify vulnerabilities and configuration weaknesses, and collaborate with application owners and vendors to implement effective remediation strategies.
• Collaborate and Innovate: Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into new projects, system implementations, and technology initiatives while supporting incident investigations, compliance requirements, and continuous security improvements.

What You Bring To Safran

• Education and Experience: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. Typically 5–7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
• Enterprise Application Security Expertise: Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms. Strong understanding of role‑based access control (RBAC), least privilege, privileged access management, application security configurations, and data protection principles.
• Identity, Integration, and Cloud Security Skills: Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management. Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
• AI Security and Risk Management: Understanding of generative AI technologies, large language models (LLMs), and the security risks associated with AI‑enabled business applications, including data leakage, prompt injection, excessive permissions, and third‑party AI integrations.
• Certifications and Professional Skills: Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, Microsoft SC‑300 are desirable. Salesforce certifications, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility, are highly valued. SAP security‑related certifications are also beneficial. Strong analytical, problem‑solving, communication, and cross‑functional collaboration skills are essential.

Why You’ll Love Working Here

• Paid Time Off
• Annual bonus opportunity
• Comprehensive medical, dental, and vision coverage
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• 401(k) with company matching contributions
• Gym membership reimbursement
• Tuition reimbursement to support your continued education
• An innovative, inclusive culture where your ideas are valued and your contributions make a difference

Visit our website for more information or check out our videos on YouTube.

At Safran Electronics & Defense, you’ll combine passion for your job with a quality work environment adapted to a good life balance. Benefit from a variety of opportunities to shape the career path that suits you: our leaders and technical experts are there to support you from your integration and career development, in France and abroad.

Safran Trusted 4D, Inc is an equal opportunity employer who does not discriminate based on race, color, citizenship, religion, gender, sexual orientation, national origin, age, disability, veteran’s status or any protected category. We encourage veterans and people with disabilities to apply.