Business Systems Security Engineer

Safran; West Henrietta (NY); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Paid Time Off

Annual bonus

Medical, dental, and vision coverage

HSA and FSA

401(k) with company matching

Gym membership reimbursement

Tuition reimbursement

Job summary

Safran Electronics & Defense’s West Henrietta site seeks a Business Systems Security Engineer to protect enterprise apps such as Salesforce and SAP in a hybrid role with at least three onsite days.

You will collaborate with Cybersecurity, IT and Business Systems teams to mitigate risks, deploy best practices, and ensure confidentiality, integrity and availability of critical information. The role also supports secure AI adoption across platforms.

Qualifications

• Bachelor's degree or equivalent experience; typically 5–7 years in cybersecurity/enterprise app security.
• Experience securing Salesforce, SAP, Microsoft 365 or similar SaaS/ERP platforms with RBAC, least privilege and data protection.
• Knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security and cloud integrations.

Responsibilities

• Secure Enterprise Business Applications: strengthen security of Salesforce, SAP and other platforms through secure configuration and IAM.
• Security Monitoring and Integration: integrate logs and threat signals into SIEM/XDR; improve detection and incident response.
• Enable Secure AI Adoption: support secure integration of AI tools and governance across business systems.
• Protect Application Integrations and Data: review APIs and data exchanges ensuring authentication, encryption, and data protection controls.
• Drive Security Assessments and Risk Reduction: conduct app security reviews and collaborate with owners and vendors to remediate.

Skills

RBAC & least privilege

API security

Cloud security

SSO & MFA

IAM governance

Education

Bachelor's degree in Cybersecurity/IT/CS or related field

Tools

Salesforce

SAP

Microsoft 365

Job description

We're looking for a Business Systems Security Engineer to join our growing team in West Henrietta, NY.

This is a hybrid position with a minimum of 3 days onsite.

Who we are:

Part of Safran Electronics & Defense, our Trusted 4D Inc. site is the world leader in Resilient Positioning, Navigation and Timing (R-PNT) technology that is used in almost every device, vehicle, utility grid, and cell phone tower that we see today. We provide virtually fail-safe GNSS and PNT solutions for defense and commercial applications worldwide. Simply put, we do work that matters, powering the systems people depend on every day.

Locally, we manufacture precise synchronization clocks for data centers called time servers, as well as GNSS simulators to help test PNT equipment before it launches - such as rockets or sports watches. Our products are used by some of the leading data center providers and space agencies in the world.

Our site is located in West Henrietta, New York, with an on-site manufacturing facility and teams in engineering, R&D, sales and marketing, and more.

But above all, joining Safran means becoming part of an international high-technology group in the aerospace, space, and defense sectors. Drawing strength from our differences and enriched by our complementarity, our 110,000 talents with unique career paths are shaping a safer, more sustainable aviation. With us, the diversity of our teams drives innovation to develop breakthrough technologies. We promote knowledge sharing and collaboration, encourage initiative, and celebrate creativity.

The Position:

Safran is seeking a Business Systems Security Engineer to help protect and strengthen the security of our enterprise business applications, including Salesforce, SAP, and other critical business platforms. Reporting to the Cybersecurity Manager, this role will work closely with the Cybersecurity, IT, and Business Systems teams, and application owners to identify and mitigate security risks, implement security best practices, and ensure the confidentiality, integrity, and availability of business-critical information.

The position will also play a key role in enabling the secure adoption of emerging technologies, including artificial intelligence (AI), automation, and integrations between enterprise applications, while supporting the organization's broader cybersecurity strategy and compliance objectives.

The Day to Day:

• Secure Enterprise Business Applications: Assess and strengthen the security of Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
• Security Monitoring and Integration: Integrate security logs, audit trails, and threat signals from enterprise business applications, including Salesforce, SAP, and other SaaS platforms, into existing security monitoring solutions such as SIEM and XDR. Develop and enhance detection capabilities, identify suspicious activities, and collaborate with Cybersecurity teammates to improve threat visibility, incident investigation, and response across business systems.
• Enable Secure AI Adoption: Evaluate and support the secure integration of AI-powered tools, assistants, and automation into business systems, addressing risks related to sensitive data exposure, application permissions, third-party connectivity, and AI governance.
• Protect Application Integrations and Data: Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
• Drive Security Assessments and Risk Reduction: Conduct application security reviews, assess third-party solutions, identify vulnerabilities and configuration weaknesses, and collaborate with application owners and vendors to implement effective remediation strategies.
• Collaborate and Innovate: Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into new projects, system implementations, and technology initiatives while supporting incident investigations, compliance requirements, and continuous security improvements.

What you Bring to Safran:

• Education and Experience: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. Typically 5-7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
• Enterprise Application Security Expertise: Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms. Strong understanding of role-based access control (RBAC), least privilege, privileged access management, application security configurations, and data protection principles.
• Identity, Integration, and Cloud Security Skills: Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management. Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
• AI Security and Risk Management: Understanding of generative AI technologies, large language models (LLMs), and the security risks associated with AI-enabled business applications, including data leakage, prompt injection, excessive permissions, and third-party AI integrations. Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10 is beneficial.
• Certifications and Professional Skills: Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300 are desirable. Salesforce certifications, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility, are highly valued. SAP security-related certifications are also beneficial. Strong analytical, problem-solving, communication, and cross-functional collaboration skills are essential.

Why You'll Love Working Here

• Paid Time Off
• Annual bonus opportunity
• Comprehensive medical, dental, and vision coverage
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• 401(k) with company matching contributions
• Gym membership reimbursement
• Tuition reimbursement to support your continued education
• An innovative, inclusive culture where your ideas are valued and your contributions make a difference

Visit our website for more information or check out our videos on YouTube

At Safran Electronics & Defense, you'll combine passion for your job with a quality work environment adapted to a good life balance. Benefit from a variety of opportunities to shape the career path that suits you: our leaders and technical experts are there to support you from your integration and career development, in France and abroad.

Safran Trusted 4D, Inc is an equal opportunity employer who does not discriminate based based on race, color, citizenship, religion, gender, sexual orientation, national origin, age, disability, veteran's status or any protected category. We encourage veterans and people with disabilities to apply.