Business Systems Security Engineer M/F

Safran Trusted 4D; New York (NY); Presencial; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Safran seeks a Business Systems Security Engineer to protect and strengthen security of enterprise applications such as Salesforce and SAP. The role reports to the Cybersecurity Manager and collaborates with Cybersecurity, IT and Business Systems teams to mitigate risks and ensure confidentiality, integrity, and availability of critical information.

Key focus areas include secure AI adoption, secure integrations, and robust identity management, with involvement in incident investigations,

Formación

• Bachelor's degree in Cybersecurity, IT, CS or related field, or equivalent experience.
• 5-7 years of experience in cybersecurity, enterprise app security, IAM or related discipline.
• Experience securing enterprise apps such as Salesforce, SAP, Microsoft 365 or comparable SaaS/ERP.
• Knowledge of RBAC, least privilege, privileged access management, app configurations and data protection.
• Familiarity with Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management.
• Understanding of generative AI tech, LLMs, and risks with AI-enabled apps; familiarity with ISO 27001/27002, NIST CSF, OWASP Top 10 is beneficial.
• Relevant cybersecurity certifications such as Security+, SecAI+, CISSP, CCSP, or Microsoft SC-300; Salesforce and SAP security certifications are a plus.

Responsabilidades

• Secure Enterprise Business Applications: assess and strengthen security of Salesforce, SAP, and other platforms.
• Security Monitoring and Integration: integrate security logs and threat signals into SIEM/XDR; improve threat visibility and response.
• Enable Secure AI Adoption: support secure integration of AI-powered tools and automation while managing data exposure risks.
• Protect Application Integrations and Data: review APIs, service accounts, registrations, and data exchanges with proper controls.
• Drive Security Assessments and Risk Reduction: conduct app security reviews and work with owners and vendors on remediation.
• Collaborate with Cybersecurity, IT, and Business Systems teams to embed security in new projects and technology initiatives.

Conocimientos

IAM

RBAC

Least Privilege

API Security

AI Security

Cloud Security

Security Audits

Educación

Bachelor's degree in Cybersecurity/IT/CS

Herramientas

Salesforce

SAP

Microsoft 365

Microsoft Entra ID

Descripción del empleo

Safran is seeking a Business Systems Security Engineer to help protect and strengthen the security of our enterprise business applications, including Salesforce, SAP, and other critical business platforms. Reporting to the Cybersecurity Manager, this role will work closely with the Cybersecurity, IT, and Business Systems teams, and application owners to identify and mitigate security risks, implement security best practices, and ensure the confidentiality, integrity, and availability of business-critical information.

The position will also play a key role in enabling the secure adoption of emerging technologies, including artificial intelligence (AI), automation, and integrations between enterprise applications, while supporting the organization's broader cybersecurity strategy and compliance objectives.

The Day to Day:

• Secure Enterprise Business Applications: Assess and strengthen the security of Salesforce, SAP, and other enterprise platforms through secure configuration, identity and access management, role-based permissions, vulnerability management, and continuous security monitoring.
• Security Monitoring and Integration: Integrate security logs, audit trails, and threat signals from enterprise business applications, including Salesforce, SAP, and other SaaS platforms, into existing security monitoring solutions such as SIEM and XDR. Develop and enhance detection capabilities, identify suspicious activities, and collaborate with Cybersecurity teammates to improve threat visibility, incident investigation, and response across business systems.
• Enable Secure AI Adoption: Evaluate and support the secure integration of AI-powered tools, assistants, and automation into business systems, addressing risks related to sensitive data exposure, application permissions, third-party connectivity, and AI governance.
• Protect Application Integrations and Data: Review and secure APIs, service accounts, application registrations, and data exchanges between enterprise platforms, ensuring appropriate authentication, authorization, encryption, and data protection controls.
• Drive Security Assessments and Risk Reduction: Conduct application security reviews, assess third-party solutions, identify vulnerabilities and configuration weaknesses, and collaborate with application owners and vendors to implement effective remediation strategies.
• Collaborate and Innovate: Partner with Cybersecurity, IT, Business Systems, and business stakeholders to embed security into new projects, system implementations, and technology initiatives while supporting incident investigations, compliance requirements, and continuous security improvements.

What you Bring to Safran:

• Education and Experience: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. Typically 5-7 years of experience in cybersecurity, enterprise application security, IAM, or a related technical discipline.
• Enterprise Application Security Expertise: Experience securing enterprise applications such as Salesforce, SAP, Microsoft 365, or comparable SaaS/ERP platforms. Strong understanding of role-based access control (RBAC), least privilege, privileged access management, application security configurations, and data protection principles.
• Identity, Integration, and Cloud Security Skills: Working knowledge of Microsoft Entra ID, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, API security, and service account management. Familiarity with cloud environments, application integrations, security logging, and automation technologies is highly desirable.
• AI Security and Risk Management: Understanding of generative AI technologies, large language models (LLMs), and the security risks associated with AI-enabled business applications, including data leakage, prompt injection, excessive permissions, and third-party AI integrations. Familiarity with security frameworks such as ISO 27001/27002, NIST CSF, or the OWASP Top 10 is beneficial.
• Certifications and Professional Skills: Relevant cybersecurity certifications such as CompTIA Security+, CompTIA SecAI+, CISSP, CCSP, or Microsoft SC-300 are desirable. Salesforce certifications, including Certified System Architect, Certified Application Architect, or specialized certifications in Identity and Access Management, Integration Architecture, or Sharing and Visibility, are highly valued. SAP security-related certifications are also beneficial. Strong analytical, problem-solving, communication, and cross-functional collaboration skills are essential.