Security Engineer II

Imagine Your Future with Us! Since 1971, Paychex has been at the forefront of simplifying HR, payroll, and benefits for American businesses. Our digital HR technology and advisory solutions cater to the changing needs of employers and their employees. With our award-winning training and endless opportunities for growth and development, you can build a lifelong career with us. We pride ourselves on fostering an inclusive and innovative culture. Our leaders are here to support your career journey; they and our dedicated employees embody the values that drive us to support each other, our clients, and our communities. Join us to pursue your passion and unleash your potential.

Overview

As a Data Security Posture Management Engineer, you will provide hands-on technical support for securing modern technologies and platforms, with a primary focus on data security posture across cloud, on-premise, and SaaS environments. You will help the organization understand where sensitive data resides, how it is accessed, and how to protect it, while developing security requirements and best-practice guidance to ensure the business maintains a competitive security posture.

A Data Security Posture Management Engineer is also responsible for collaborating with our IT and Data partners on business initiatives and recommending secure design solutions to protect against known security threats, data exposure, and misconfigurations. The ideal candidate will have experience with data discovery, classification, and access governance across environments such as public cloud platforms, Office 365, and data platforms like Snowflake, as well as strong foundational security and IT skills.

An ideal candidate will have a bachelor's degree in Information Security or a related field. In addition, you must have excellent written and oral communication skills, be successful working on a team collaboratively, and understand foundational IT concepts. Entry-level cybersecurity certifications are preferred.

Responsibilities

• Manage identification, prioritization, and remediation guidance of data security vulnerabilities, threats, and misconfigurations across cloud, on-premise, and SaaS environments.

• Implement, configure, and tune Data Security Posture Management (DSPM) and data discovery capabilities to continuously identify and classify sensitive data (e.g., PII, PCI, PHI, secrets, intellectual property) across structured and unstructured data stores.

• Continuously assess data security posture across major cloud providers, on-prem databases, Office 365 (SharePoint, OneDrive, Exchange, Teams), and data platforms such as Snowflake, helping drive remediation with internal and external partners.

• Support the definition and implementation of least-privilege access, RBAC/ABAC models, and data handling standards for critical data repositories.

• Integrate DSPM and data security findings into SIEM/SOAR and ticketing systems to support monitoring, alerting, workflow, and incident response related to data security events.

• Track security events and incidents from initial detection through final resolution, including those involving potential data exposure or data loss.

• Develop and maintain automation and tooling (scripts, integrations, dashboards) to reduce manual tasks and report on key data security posture metrics for technical and business stakeholders.

• Demonstrate understanding of information security risks, threats, and controls, particularly as they relate to data storage, access, sharing, and retention.

• Demonstrate understanding of cloud platforms and how to properly implement cloud-native data security best practices, including encryption, key management, and data access controls.

• Maintain awareness of technological trends and developments in security, cloud, data platforms, and related technologies, with an emphasis on evolving data security and privacy requirements.

• Apply knowledge of core IT concepts and functions when working with infrastructure, application, and data engineering teams.

• Collaborate on cross-functional projects inside and outside of Enterprise Security to ensure that security and data protection concerns are addressed throughout the project life cycle. Ensure security projects and deliverables are completed on time and on budget.

• Manage approval, tracking, and reporting of any security exceptions as the need arises, including those involving data access or data handling exceptions.

Qualifications

• Bachelor’s Degree in Information Security, Computer Science, Software Development, or another related technical discipline – Preferred.

• 3+ years of experience in Information Security / Cyber Security, with at least 1–2 years focused on data security, cloud security, or data security posture management concepts.

• Experience with data discovery, classification, and/or DSPM capabilities in hybrid environments (cloud, on-prem, SaaS) is strongly preferred.

• Understanding of cloud platforms (e.g., AWS, Azure, GCP) and how to properly implement security and data protection best practices in those environments.

• Familiarity with SaaS and data platforms such as Office 365 and data warehouses/analytics platforms (e.g., Snowflake or similar).

• Practical experience with scripting or automation (e.g., Python, PowerShell, or similar) for integrating security tools, building reports, or remediating issues at scale.

• Understanding of core data security concepts (data lifecycle, classification, encryption, access control, DLP, data minimization) and their application in enterprise environments.

• Understanding of information security risks, threats, and controls, and familiarity with common security or privacy frameworks (e.g., NIST CSF, ISO 27001, SOC 2, GDPR/CCPA concepts).

• Entry level cybersecurity certifications (Security+, (ISC)² Associate, GSEC, CEH, etc.) – Preferred.

• Ability to work hybrid 3 days a week out of the locations listed on the job posting

Live the Paychex Values

• Act with uncompromising integrity.

• Provide outstanding service and build trusted relationships.

• Drive innovation in our products and services and continually improve our processes.

• Work in partnership and support each other.

• Be personally accountable and deliver on commitments.

• Treat each other with respect and dignity.

What's in it for you?

• We value your well-being: We provide over 21 comprehensive rewards, including medical coverage, virtual wellness classes, tuition reimbursement, 401(k) + employer match, adoption assistance, financial assistance, and much more.

• We value your time: From paid time off to company holidays, culture days, and comprehensive work-life balance programs, we will ensure you have the flexibility you need to be your best.

• We value your development: Our award-winning training and development programs empower our employees with ongoing learning opportunities to give you the building blocks to grow your career.

• We value your perspective: Our company culture reflects the diversity of our employees. We want you to be you and your voice to be heard.

• We value our communities: We offer paid time off for volunteerism and promote many company-wide and local initiatives that benefit organizations you care about.

Note: The benefits described apply to full-time employees. Benefits for part-time, contract, and intern roles may vary.

Not sure if you meet every requirement?

At Paychex, we know that great talent comes in many forms. If you're passionate about the role but don't check every box, we still encourage you to apply. You might be the right fit - either for this position or another opportunity with us.

Paychex is an equal opportunity employer. We are committed to fostering a respectful and inclusive workplace where all individuals are treated fairly and evaluated based on their qualifications, experience, and merit. We comply with all applicable federal, state, and local laws prohibiting discrimination in employment.