Paychex · 2 days ago
Security Engineer II
Webster, NY
Contract
Hybrid
Mid Level
3+ years expPaychex is a leader in simplifying HR, payroll, and benefits for American businesses. The Data Security Posture Management Engineer will provide technical support for securing data across various environments, focusing on data security posture and collaborating with IT partners to recommend secure design solutions.
AccountingBookkeeping and PayrollFinancial ServicesHuman ResourcesSoftware
Responsibilities
Manage identification, prioritization, and remediation guidance of data security vulnerabilities, threats, and misconfigurations across cloud, on-premise, and SaaS environments
Implement, configure, and tune Data Security Posture Management (DSPM) and data discovery capabilities to continuously identify and classify sensitive data (e.g., PII, PCI, PHI, secrets, intellectual property) across structured and unstructured data stores
Continuously assess data security posture across major cloud providers, on-prem databases, Office 365 (SharePoint, OneDrive, Exchange, Teams), and data platforms such as Snowflake, helping drive remediation with internal and external partners
Support the definition and implementation of least-privilege access, RBAC/ABAC models, and data handling standards for critical data repositories
Integrate DSPM and data security findings into SIEM/SOAR and ticketing systems to support monitoring, alerting, workflow, and incident response related to data security events
Track security events and incidents from initial detection through final resolution, including those involving potential data exposure or data loss
Develop and maintain automation and tooling (scripts, integrations, dashboards) to reduce manual tasks and report on key data security posture metrics for technical and business stakeholders
Demonstrate understanding of information security risks, threats, and controls, particularly as they relate to data storage, access, sharing, and retention
Demonstrate understanding of cloud platforms and how to properly implement cloud-native data security best practices, including encryption, key management, and data access controls
Maintain awareness of technological trends and developments in security, cloud, data platforms, and related technologies, with an emphasis on evolving data security and privacy requirements
Apply knowledge of core IT concepts and functions when working with infrastructure, application, and data engineering teams
Collaborate on cross-functional projects inside and outside of Enterprise Security to ensure that security and data protection concerns are addressed throughout the project life cycle. Ensure security projects and deliverables are completed on time and on budget
Manage approval, tracking, and reporting of any security exceptions as the need arises, including those involving data access or data handling exceptions
Qualification
Required
Bachelor's Degree in Information Security, Computer Science, Software Development, or another related technical discipline
3+ years of experience in Information Security / Cyber Security, with at least 1-2 years focused on data security, cloud security, or data security posture management concepts
Experience with data discovery, classification, and/or DSPM capabilities in hybrid environments (cloud, on-prem, SaaS)
Understanding of cloud platforms (e.g., AWS, Azure, GCP) and how to properly implement security and data protection best practices in those environments
Familiarity with SaaS and data platforms such as Office 365 and data warehouses/analytics platforms (e.g., Snowflake or similar)
Practical experience with scripting or automation (e.g., Python, PowerShell, or similar) for integrating security tools, building reports, or remediating issues at scale
Understanding of core data security concepts (data lifecycle, classification, encryption, access control, DLP, data minimization) and their application in enterprise environments
Understanding of information security risks, threats, and controls, and familiarity with common security or privacy frameworks (e.g., NIST CSF, ISO 27001, SOC 2, GDPR/CCPA concepts)
Ability to work hybrid 3 days a week out of the locations listed on the job posting
Preferred
Entry level cybersecurity certifications (Security+, (ISC)² Associate, GSEC, CEH, etc.)
Benefits
Medical coverage
Virtual wellness classes
Tuition reimbursement
401(k) + employer match
Adoption assistance
Financial assistance
Paid time off
Company holidays
Culture days
Comprehensive work-life balance programs
Paid time off for volunteerism
Company
Paychex
Paychex is a human capital management company that delivers advisory solutions in human resources, employee benefit solutions, and payroll.
10001+ employees
H1B Sponsorship
Paychex has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (45)
2024 (33)
2023 (32)
2022 (43)
2021 (26)
Funding
Current Stage
Public CompanyTotal Funding
$4.2B2025-04-08Post Ipo Debt· $4.2B
1983-08-29IPO
Leadership Team
John Gibson
President and Chief Executive Officer
Robert L. Schrader
Senior Vice President and Chief Financial Officer
Recent News
bloomberglaw.com
2025-12-29
Rochester Business Journal
2025-12-27
2025-12-19
Company data provided by crunchbase