Security Engineer

Security Engineer needed to troubleshoot enterprise security configuration issues, support identity and access management, and strengthen security monitoring and audit readiness.

• Diagnose and resolve Level 2 security configuration and platform issues escalated from Level 1 support
• Support standards for the classification, administration, and lifecycle management of Suffolk data, including applying data handling requirements across systems and business processes
• Serve as a security resource for corporate applications by assessing risks, supporting secure configurations, reviewing access controls, and coordinating remediation with application owners and technical teams
• Participate in independent security audits
  , vulnerability scans, and penetration tests to support confidentiality, integrity, and availability of Suffolk data
• Help enforce identity and access management policies and procedures for on-premises and cloud services, including access reviews, role-based access controls, privileged access controls, secure authentication practices, and remediation of access-related findings
• Support identity manageability and access governance across provisioning, security, and privacy; implement and manage secure identity solutions via third-party providers
• Provide operational support for vulnerability scanning, gap analysis, and security initiatives, including monitoring findings, validating risk and ownership, triaging remediation priorities, tracking corrective actions, and reporting progress
• Identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams; document findings and coordinate remediation
• Maintain information security dashboards, review security metrics, conduct risk analysis, and help management understand trends and remediation progress
• Support enterprise security systems and manage data-driven review processes for critical security infrastructure improvements
• Mentor Help Desk Analysts by developing skills through exposure to security administration and reinforcing Suffolk information security standards
• Stay current on evolving security challenges and how they impact Suffolk by monitoring threat and attack landscape trends and security developments
• Contribute to security operations, control improvements, and risk-reduction initiatives to support Suffolk’s evolving business requirements
• Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and cloud workload protection support in Azure, AWS, or similar platforms

• BS degree in computer science, information systems management, or a related technical discipline (or equivalent combination of education, technical training, or work/military experience)
• 5+ years relevant work experience in IT and/or information security, including hands-on support for enterprise systems, security tools, or security operations
• 3+ years enterprise information security experience, preferably in complex organizations
• 3+ years experience with enterprise cloud-based solutions (
  Azure
  , AWS
  , etc.)
• 3+ years experience with large, distributed systems
• Industry certificate desired (CISSP, CISA, etc.)
• Project management and audit experience desired

• Microsoft security tools
• Vulnerability management platforms
• Cloud security platforms
• Security monitoring solutions
• NIST
• ISO 27001
• DISA STIG
• CIS
• PCI
• MA 201 CMR 17.00
• CCPA
• HIPAA
• Azure
• AWS
• Windows
• MacOS
• Linux

• Competitive salaries
• Auto allowances and gas cards for certain roles
• Access to market-leading medical and emotional and mental health benefits
• Dental and vision insurance…