Senior Security Engineer: Data Protection & Cloud Risk

Rochester-Institute-of-Technology; City of Rochester (NY); Hybrid; USD 82,000 - 131,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Rochester Institute of Technology's Information Security Office seeks a Security Engineer III to lead complex security initiatives, implement controls, and advance the university's cybersecurity strategy. This role combines hands-on technical work with stakeholder collaboration to reduce risk and enable innovation.

You will drive the Data Loss Prevention and data classification program with Microsoft Purview, assess risks, and guide stakeholders on secure architectures.

Qualifications

• Conducts vulnerability scanning and penetration testing to identify security gaps.
• Performs security risk assessments and validation of controls.
• Participates in security incident response and post-incident analysis.
• Designs security architectures and evaluates tools and vendors.
• Mentors colleagues and communicates risk to stakeholders.

Responsibilities

• Leads vulnerability scanning and penetration testing efforts.
• Investigates services and applications for security risk and mitigations.
• Performs security incident response and root-cause analysis.
• Designs and implements complex security solutions and architectures.
• Documents security processes, capacity planning, and reporting.

Skills

Security architecture

Threat analysis

Incident response

Vulnerability scanning

Project leadership

Network protection

Endpoint security

Education

Bachelor's degree in related field

Tools

Firewalls

Intrusion prevention systems

Job description

Rochester Institute of Technology's Information Security Office seeks a Security Engineer III to lead complex security initiatives, implement controls, and advance the university's cybersecurity strategy. This role combines hands-on technical work with stakeholder collaboration to reduce risk and enable innovation.

You will drive the Data Loss Prevention and data classification program with Microsoft Purview, assess risks, and guide stakeholders on secure architectures.