Senior Security Engineer

About the Organization Deliver an exceptional experience. Make a real impact. Grow with us.

At Greenlight Networks, we're not just building a network-we're building stronger, more connected communities. Founded in 2011, Greenlight Networks designs, builds, and operates a high-speed fiber-optic network delivering internet speeds up to 8 Gigabits per second to homes and small businesses. Today, we serve more than 225,000 homes and nearly 10,000 businesses across New York, with continued expansion into Pennsylvania and Baltimore.

Our mission is to connect our communities by delivering the best internet experience and providing our customers the freedom to work, play, and live without limits!

Category Information Technology

Full-Time/Part-Time Full-Time

Location(s) Rochester, Baltimore, Binghamton, Binghamton Office, Scranton

The Senior Security Engineer is responsible for owning and advancing the organization’s overall security posture across infrastructure, cloud platforms, endpoints, applications, and data. This role combines strategic leadership, operational ownership, and hands‑on technical expertise. This position will interface with our SOC vendor to ensure security tooling, monitoring, and findings translate into effective risk reduction and continuous improvement.

You will work closely with cross‑functional teams including IT, Network Engineering, Legal, HR, Compliance, and external partners to design, implement, document, and evolve security controls, policies, and procedures that support the business today and scale with future growth in a rapidly evolving environment.

• Own and evolve the company’s security strategy, roadmap, and maturity over time, aligning security investments with business risk and priorities.
• Establish, maintain, enforce, and improve security policies, standards, procedures, and documentation in coordination with Legal, HR, Compliance, Privacy, and IT leadership.
• Define and oversee security architecture principles across on‑prem, cloud, endpoint, and SaaS environments.
• Act as a trusted advisor to leadership on security risk, tradeoffs, and priorities.

• Serve as the primary point of contact and escalation for the managed SOC provider.
• Review and validate alerts, investigations, vulnerability findings, and recommendations from the SOC.
• Ensure SIEM, XDR, EDR, vulnerability management, and related tools are tuned, effective, and delivering measurable value.
• Translate SOC outputs into prioritized remediation plans and coordinate execution with internal teams.

• Lead threat modeling, security risk assessments, and architecture reviews for new and existing systems.
• Oversee vulnerability management activities, including scanning, prioritization, remediation, and verification.
• Independently remediate security issues where appropriate, and partner with system owners, developers, and infrastructure teams where shared responsibility exists.
• Support incident response activities, including coordination with the SOC, root cause analysis, containment, remediation, and post‑incident improvement.
• Contribute hands‑on expertise across environments including:
  • Microsoft 365 and identity platforms
  • Endpoints (PCs, laptops, EDR)
  • Network and perimeter security including firewalls and VPN
  • Virtualized and Linux‑based servers (RHEL primarily)
  • AWS and cloud‑native services
  • Coordinate and participate in regular security audits, vulnerability scan remediations, and penetration testing.

• Contribute to business continuity and disaster recovery planning, testing, and improvement.
• Partner with compliance and privacy stakeholders to ensure security controls align with regulatory and contractual obligations.
• Support privacy and data protection initiatives, including PIAs, security reviews of data‑processing systems, and technical input for data subject requests.

• Assess and integrate security controls for acquired or merged companies.
  • Participate in due diligence activities related to mergers and acquisitions.
• Evaluate vendor security…