Security Engineer

Overview.

Responsibilities

Roles and Responsibilities Diagnose and solve Level 2 issues related to security configurations and platforms as escalated by Level 1 support

Support standards for the classification, administration, and lifecycle management of Suffolk data, including helping apply established data handling requirements across systems and business processes.

Serve as a key security resource for Suffolk corporate applications by helping assess risks, support secure configurations, review access controls, and coordinate remediation with application owners and technical teams.

Participate in independent security audits, vulnerability scans, and penetration tests on Suffolk infrastructure to ensure confidentiality, integrity, and availability of Suffolk data.

Help enforce Suffolk identity and access management policies and procedures for on-premises and cloud-based services by supporting access reviews, role-based access controls, privileged access controls, secure authentication practices, and remediation of access-related findings.

Support identity manageability, access governance, provisioning, security, and privacy. Implement and manage solutions for secure identity through third-party providers.

Provide operational assistance with vulnerability scanning, gap analysis, and security initiatives. Monitor findings, validate risk and ownership, triage remediation priorities, track corrective actions, and report progress for Suffolk systems.

Help identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams to understand root causes, document findings, and coordinate practical remediation.

Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management understand trends, prioritize remediation, and track progress against security initiatives.

Support Suffolk’s enterprise security systems and manage comprehensive, data-driven review processes to enhance critical security infrastructure

Mentor Help Desk Analysts, developing skillsets through exposure to security administration while promoting Suffolk information security standards.

Remain informed about evolving security challenges in IT and how they affect Suffolk. Maintain an understanding of the current threat and attack landscape, latest security trends, and Suffolk information systems.

Support Suffolk’s information security posture in accordance with Suffolk’s evolving business requirements by contributing to security operations, control improvements, and risk reduction initiatives.

Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and support for cloud workload protection in Azure, AWS, or similar platforms.

Skills and Knowledge Strong interpersonal skills, including collaboration, communication, negotiation, and mediation

Strong peer influence skills with the ability to enable secure solutions while maintaining effective working relationships with business partners.

Excellent written documentation ability, including the flexibility to deliver varied content to varied audiences

Demonstrated experience designing, installing, and configuring enterprise security solutions while meeting enterprise architecture, security, and privacy needs.

Technical foundation in systems security and network security.

Experience with pen testing, security scanning, threat modeling, and incident management are desirable.

Familiarity and experience with industry standard enterprise security solutions such as Microsoft security tools, vulnerability management…