Security Engineer III

Rochester Institute of Technology; United States; Hybrid; USD 82,000 - 131,000; Full time

Job summary

Rochester Institute of Technology is seeking a Security Engineer III to lead complex security initiatives, implement controls, and collaborate with stakeholders to reduce institutional risk while enabling innovation.

This hybrid role requires weekly on-campus presence in Rochester, NY and offers a compensation range reflective of senior cybersecurity leadership within a higher education context.

Qualifications

• Bachelor's degree in related field or equivalent experience.
• 5+ years of related experience in cybersecurity or information security.
• Experience leading security initiatives and data governance programs.

Responsibilities

• Lead and manage the university's DLP and data classification program.
• Embed security controls with Data Hub stakeholders to protect institutional data.
• Conduct third‑party cybersecurity risk reviews and assessments.
• Address risks related to AI, cloud services, and evolving platforms.
• Advise stakeholders on security architecture and risk management while mentoring colleagues.
• Participate in incident response activities, including after-hours support when needed.

Skills

Data governance

Security architecture

Incident response

Vulnerability management

Data protection

DLP and data classification

Vendor security reviews

Risk management

Mentorship

Education

Bachelor's degree in related field

Tools

Microsoft Purview

Job description

Position Highlights

The Security Engineer III serves as a senior cybersecurity professional responsible for leading complex security initiatives that protect the university's information assets, institutional data, and technology infrastructure. This position plays a critical role in advancing RIT's cybersecurity strategy through the implementation of security controls, proactive risk management, and collaboration with stakeholders across the institution. This role offers a hybrid work arrangement, with an expectation of weekly on campus presence.

Key responsibilities include:

• Leading the university's Data Loss Prevention (DLP) and data classification program through Microsoft Purview to strengthen data governance and safeguard sensitive information.
• Partnering with Data Hub stakeholders to embed security controls, enhance security processes, and support the secure use of institutional data.
• Managing third‑party cybersecurity risk through vendor security reviews and assessments to ensure compliance with regulatory requirements and university security standards.
• Supporting the identification and mitigation of emerging risks associated with Artificial Intelligence (AI), cloud services, and evolving technology platforms.
• Advising technical and business stakeholders on security architecture, risk management, and security best practices while serving as a mentor and trusted resource to colleagues.
• Participating in cybersecurity incident response activities, including occasional after‑hours or on‑site support during active security incidents when necessary.

The successful candidate will combine deep technical expertise with strong communication and collaboration skills to drive security initiatives that reduce institutional risk, enable innovation, and support the university's strategic objectives.

Preferred Qualifications

While not required, the ideal candidate will hold a Certified Information Systems Security Professional (CISSP) certification or an equivalent industry‑recognized cybersecurity certification. Learn more about the CISSP credential on the ISC² website.

Information Security Office

The Information Security Office provides leadership to the RIT community in safeguarding the confidentiality, integrity, and availability of the university's information assets. The team is responsible for advancing cybersecurity programs and services that enable teaching, learning, research, and business operations while helping the university effectively manage technology and data‑related risks. The Information Security Office is a highly collaborative team of cybersecurity professionals dedicated to protecting the university while enabling innovation. Team members work closely with faculty, staff, students, researchers, and technology partners across the institution to develop practical, risk‑based solutions that support RIT's mission. The office fosters a culture of trust, continuous learning, shared expertise, and professional growth, where individuals are empowered to lead initiatives, contribute new ideas, and make meaningful impacts on the university's security posture. The team oversees a broad portfolio of cybersecurity functions, including security engineering, security governance, awareness and training, threat intelligence and incident response, vulnerability management, data protection, and private information management. As RIT continues to expand its use of cloud technologies, advanced analytics, and Artificial Intelligence (AI), the Information Security Office plays a critical role in enabling secure innovation through strong security practices, effective risk management, and strategic partnerships across the university.

Essential Duties & Responsibilities

• Conducts vulnerability scanning and penetration testing
• Investigates services and application security
• Performs security comparative review, security risk assessment, and security validation
• Performs operational duties during security incident responses, troubleshoots and performs root cause analysis for security solutions
• Analyzes, designs, and installs complex enterprise security solutions and frameworks
• Designs security solutions architecture, selects tools and partners, and configures and manages capacity, changes, documentation, and reporting
• Contributes to the documentation of security processes and procedures
• Other duties as assigned

Knowledge, Skills, & Abilities

• Knowledge of security architecture principles and best practices for system and network protection
• Knowledge of advanced cybersecurity tools, such as firewalls and intrusion prevention systems
• Skill in deploying and configuring cybersecurity tools and technologies to mitigate risks
• Skill in designing and implementing security measures to protect IT infrastructure and sensitive data
• Ability to lead complex technical projects
• Ability to analyze complex security threats and develop proactive solutions to prevent breaches
• Ability to troubleshoot and resolve advanced security incidents with minimal supervision

Minimum Education & Experience

Bachelor's degree in related field

5 years of related experience

Equivalent combination of experience & education may be considered

Job Level Overview

Specialized Contributor Level 3 – A senior‑level role requiring broad understanding of the profession or field of work. Independently leads diverse and often complex assignments, projects, or programs. May act as a mentor and guide less experienced staff.

FLSA Category

Exempt

Work Location

Hybrid

Compensation

$81,600.00 – $130,600.00 Annual

Application Materials

Cover Letter, Curriculum Vitae or Resume

Candidates must be eligible to work in the United States.

Additional Details

In compliance with NYS's Pay Transparency Act, the salary range for this position is listed above. Rochester Institute of Technology considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer.

The hiring process for this position may require a criminal background check and/or motor vehicle records check. Any verbal or written offer made is contingent on satisfactory results, as determined by Human Resources.

RIT provides equal opportunity to all qualified individuals and does not discriminate on the basis of race, color, creed, age, marital status, sex, gender, religion, sexual orientation, gender identity, gender expression, national origin, veteran status or disability in its hiring, admissions, educational programs and activities. RIT provides reasonable accommodations to applicants with disabilities under the Rehabilitation Act, the Americans with Disabilities Act, the New York Human Rights Law, or similar applicable law.

If you need reasonable accommodation for any part of the application and hiring process, please contact the Human Resources office at 585-475-2424 or email your request to [e-mail]. Determinations on requests for reasonable accommodation will be made on a case‑by‑case basis.

Founded in 1829, Rochester Institute of Technology has a long‑standing history of innovation that blends the arts, technology, and experiential learning. In addition to its main campus in Rochester, New York, RIT maintains a strong international presence with over 100 active global partnerships and international campuses in Croatia, Dubai, and Kosovo. As of Fall 2024, total student enrollment across all campuses exceeded 21,000. Nationally recognized for its co‑op and internship programs, RIT is supported by more than 4,000 dedicated faculty and staff members committed to student success. Its 1,300‑acre suburban campus features cutting‑edge facilities that reflect RIT’s strengths in applied research, design, and workforce development.

Apply in Workday