Security Engineer III

Rochester-Institute-of-Technology; City of Rochester (NY); Hybrid; USD 82,000 - 131,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Rochester Institute of Technology's Information Security Office seeks a Security Engineer III to lead complex security initiatives, implement controls, and advance the university's cybersecurity strategy. This role combines hands-on technical work with stakeholder collaboration to reduce risk and enable innovation.

You will drive the Data Loss Prevention and data classification program with Microsoft Purview, assess risks, and guide stakeholders on secure architectures.

Qualifications

• Conducts vulnerability scanning and penetration testing to identify security gaps.
• Performs security risk assessments and validation of controls.
• Participates in security incident response and post-incident analysis.
• Designs security architectures and evaluates tools and vendors.
• Mentors colleagues and communicates risk to stakeholders.

Responsibilities

• Leads vulnerability scanning and penetration testing efforts.
• Investigates services and applications for security risk and mitigations.
• Performs security incident response and root-cause analysis.
• Designs and implements complex security solutions and architectures.
• Documents security processes, capacity planning, and reporting.

Skills

Security architecture

Threat analysis

Incident response

Vulnerability scanning

Project leadership

Network protection

Endpoint security

Education

Bachelor's degree in related field

Tools

Firewalls

Intrusion prevention systems

Job description

Position HighlightsThe Security Engineer III serves as a senior cybersecurity professional responsible for leading complex security initiatives that protect the university's information assets, institutional data, and technology infrastructure. This position plays a critical role in advancing RIT's cybersecurity strategy through the implementation of security controls, proactive risk management, and collaboration with stakeholders across the institution.This role offers a hybrid work arrangement, with an expectation of weekly on campus presence.Key responsibilities include:Leading the university's Data Loss Prevention (DLP) and data classification program through Microsoft Purview to strengthen data governance and safeguard sensitive information.Partnering with Data Hub stakeholders to embed security controls, enhance security processes, and support the secure use of institutional data.Managing third-party cybersecurity risk through vendor security reviews and assessments to ensure compliance with regulatory requirements and university security standards.Supporting the identification and mitigation of emerging risks associated with Artificial Intelligence (AI), cloud services, and evolving technology platforms.Advising technical and business stakeholders on security architecture, risk management, and security best practices while serving as a mentor and trusted resource to colleagues.Participating in cybersecurity incident response activities, including occasional after-hours or on-site support during active security incidents when necessary.The successful candidate will combine deep technical expertise with strong communication and collaboration skills to drive security initiatives that reduce institutional risk, enable innovation, and support the university's strategic objectives.Preferred Qualifications:While not required, the ideal candidate will hold a Certified Information Systems Security Professional (CISSP) certification or an equivalent industry-recognized cybersecurity certification. Learn more about the CISSP credential on the ISC² website .Information Security OfficeThe Information Security Office provides leadership to the RIT community in safeguarding the confidentiality, integrity, and availability of the university's information assets. The team is responsible for advancing cybersecurity programs and services that enable teaching, learning, research, and business operations while helping the university effectively manage technology and data-related risks.The Information Security Office is a highly collaborative team of cybersecurity professionals dedicated to protecting the university while enabling innovation. Team members work closely with faculty, staff, students, researchers, and technology partners across the institution to develop practical, risk-based solutions that support RIT's mission. The office fosters a culture of trust, continuous learning, shared expertise, and professional growth, where individuals are empowered to lead initiatives, contribute new ideas, and make meaningful impacts on the university's security posture.The team oversees a broad portfolio of cybersecurity functions, including security engineering, security governance, awareness and training, threat intelligence and incident response, vulnerability management, data protection, and private information management. As RIT continues to expand its use of cloud technologies, advanced analytics, and Artificial Intelligence (AI), the Information Security Office plays a critical role in enabling secure innovation through strong security practices, effective risk management, and strategic partnerships across the university.Essential Duties & ResponsibilitiesConducts vulnerability scanning and penetration testingInvestigates services and application security. Performs security comparative review, security risk assessment, and security validationPerforms operational duties during security incident responses, troubleshoots and performs root cause analysis for security solutionsAnalyzes, designs, and installs complex enterprise security solutions and frameworksDesigns security solutions architecture, selects tools and partners, and configures and manages capacity, changes, documentation, and reportingContributes to the documentation of security processes and proceduresOther duties as assignedKnowledge, Skills, & AbilitiesKnowledge of security architecture principles and best practices for system and network protectionKnowledge of advanced cybersecurity tools, such as firewalls and intrusion prevention systemsSkill in deploying and configuring cybersecurity tools and technologies to mitigate risksSkill in designing and implementing security measures to protect IT infrastructure and sensitive dataAbility to lead complex technical projectsAbility to analyze complex security threats and develop proactive solutions to prevent breachesAbility to troubleshoot and resolve advanced security incidents with minimal supervisionMinimum Education & ExperienceBachelor's degree in related field5 years of related experienceEquivalent combination of experience & education may be consideredJob Level OverviewSpecialized Contributor Level 3 - A senior-level role requiring broad understanding of the profession or field of work. Independently leads diverse and often complex assignments, projects, or programs. May act as a mentor and guide less experienced staff.FLSA CategoryExemptWork LocationHybridCompensation$81,600.00 - $130,600.00 AnnualApplication MaterialsWhen you are ready to complete an application for this position please be prepared to submit the below requested information. This will be required to ensure your application is processed in a timely manner.Cover Letter, Curriculum Vitae or ResumeCandidates must be eligible to work in the United States.Additional DetailsIn compliance with NYS's Pay Transparency Act, the salary range for this position is listed above. Rochester Institute of Technology considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. The hiring process for this position may require a criminal background check and/or motor vehicle records check. Any verbal or written offer made is contingent on satisfactory results, as determined by Human Resources. RIT provides equal opportunity to all qualified individuals and does not discriminate on the basis of race, color, creed, age, marital status, sex, gender, religion, sexual orientation, gender identity, gender expression, national origin, veteran status or disability in its hiring, admissions, educational programs and activities. RIT provides reasonable accommodations to applicants with disabilities under the Rehabilitation Act, the Americans with Disabilities Act, the New York Human Rights Law, or similar applicable law.If you need reasonable accommodation for any part of the application and hiring process, please contact the Human Resources office at 585-475-2424 or email your request to [e-mail] . Determinations on requests for reasonable accommodation will be made on a case-by-case basis.