Security Engineer II

Overview

As a Data Security Posture Management Engineer, you will provide hands-on technical support for securing modern technologies and platforms, with a primary focus on data security posture across cloud, on-premise, and SaaS environments. You will help the organization understand where sensitive data resides, how it is accessed, and how to protect it, while developing security requirements and best-practice guidance to ensure the business maintains a competitive security posture.

A Data Security Posture Management Engineer is also responsible for collaborating with our IT and Data partners on business initiatives and recommending secure design solutions to protect against known security threats, data exposure, and misconfigurations. The ideal candidate will have experience with data discovery, classification, and access governance across environments such as public cloud platforms, Office 365, and data platforms like Snowflake, as well as strong foundational security and IT skills.

An ideal candidate will have a bachelor's degree in Information Security or a related field. In addition, you must have excellent written and oral communication skills, be successful working on a team collaboratively, and understand foundational IT concepts. Entry-level cybersecurity certifications are preferred.

Responsibilities

• Manage identification, prioritization, and remediation guidance of data security vulnerabilities, threats, and misconfigurations across cloud, on-premise, and SaaS environments.
• Implement, configure, and tune Data Security Posture Management (DSPM) and data discovery capabilities to continuously identify and classify sensitive data (, PII, PCI, PHI, secrets, intellectual property) across structured and unstructured data stores.
• Continuously assess data security posture across major cloud providers, on-prem databases, Office 365 (SharePoint, OneDrive, Exchange, Teams), and data platforms such as Snowflake, helping drive remediation with internal and external partners.
• Support the definition and implementation of least-privilege access, RBAC / ABAC models, and data handling standards for critical data repositories.
• Integrate DSPM and data security findings into SIEM / SOAR and ticketing systems to support monitoring, alerting, workflow, and incident response related to data security events.
• Track security events and incidents from initial detection through final resolution, including those involving potential data exposure or data loss.
• Develop and maintain automation and tooling (scripts, integrations, dashboards) to reduce manual tasks and report on key data security posture metrics for technical and business stakeholders.
• Demonstrate understanding of information security risks, threats, and controls, particularly as they relate to data storage, access, sharing, and retention.
• Demonstrate understanding of cloud platforms and how to properly implement cloud-native data security best practices, including encryption, key management, and data access controls.
• Maintain awareness of technological trends and developments in security, cloud, data platforms, and related technologies, with an emphasis on evolving data security and privacy requirements.
• Apply knowledge of core IT concepts and functions when working with infrastructure, application, and data engineering teams.
• Collaborate on cross-functional projects inside and outside of Enterprise Security to ensure that security and data protection concerns are addressed throughout the project life cycle. Ensure security projects and deliverables are completed on time and on budget.
• Manage approval, tracking, and reporting of any security exceptions as the need arises, including those involving data access or data handling exceptions.

Qualifications

Compensation

In the spirit of pay transparency, we are excited to share that the starting base pay range for this position is $98,400 - $154,600 annually. Please keep in mind that this range is the base pay only and does not consider other components that make up the total rewards package for the position. If you are hired at Paychex, your overall compensation will be determined based on factors such as geographic location, skills, education, and / or experience which may result in total compensation outside of this range.

Live the Paychex Values

What's in it for you?

Note : The benefits described apply to full-time employees. Benefits for part-time, contract, and intern roles may vary.

Not sure if you meet every requirement?

At Paychex, we know that great talent comes in many forms. If you're passionate about the role but don't check every box, we still encourage you to apply. You might be the right fit - either for this position or another opportunity with us.

Paychex is an equal opportunity employer. We are committed to fostering a respectful and inclusive workplace where all individuals are treated fairly and evaluated based on their qualifications, experience, and merit. We comply with all applicable federal, state, and local laws prohibiting discrimination in employment.