Security Engineer III

Position Highlights

The Security Engineer III serves as a senior cybersecurity professional responsible for leading complex security initiatives that protect the university's information assets, institutional data, and technology infrastructure. This position plays a critical role in advancing RIT's cybersecurity strategy through the implementation of security controls, proactive risk management, and collaboration with stakeholders across the institution.

This role offers a hybrid work arrangement, with an expectation of weekly on campus presence.

Key responsibilities include:

• Leading the university's Data Loss Prevention (DLP) and data classification program through Microsoft Purview to strengthen data governance and safeguard sensitive information.
• Partnering with Data Hub stakeholders to embed security controls, enhance security processes, and support the secure use of institutional data.
• Managing third-party cybersecurity risk through vendor security reviews and assessments to ensure compliance with regulatory requirements and university security standards.
• Supporting the identification and mitigation of emerging risks associated with Artificial Intelligence (AI), cloud services, and evolving technology platforms.
• Advising technical and business stakeholders on security architecture, risk management, and security best practices while serving as a mentor and trusted resource to colleagues.
• Participating in cybersecurity incident response activities, including occasional after-hours or on-site support during active security incidents when necessary.

The successful candidate will combine deep technical expertise with strong communication and collaboration skills to drive security initiatives that reduce institutional risk, enable innovation, and support the university's strategic objectives.

Preferred Qualifications:

While not required, the ideal candidate will hold a Certified Information Systems Security Professional (CISSP) certification or an equivalent industry-recognized cybersecurity certification. Learn more about the CISSP credential on the ISC²website.

Information Security Office

The Information Security Office provides leadership to the RIT community in safeguarding the confidentiality, integrity, and availability of the university's information assets. The team is responsible for advancing cybersecurity programs and services that enable teaching, learning, research, and business operations while helping the university effectively manage technology and data-related risks.

The Information Security Office is a highly collaborative team of cybersecurity professionals dedicated to protecting the university while enabling innovation. Team members work closely with faculty, staff, students, researchers, and technology partners across the institution to develop practical, risk-based solutions that support RIT's mission. The office fosters a culture of trust, continuous learning, shared expertise, and professional growth, where individuals are empowered to lead initiatives, contribute new ideas, and make meaningful impacts on the university's security posture.

The team oversees a broad portfolio of cybersecurity functions, including security engineering, security governance, awareness and training, threat intelligence and incident response, vulnerability management, data protection, and private information management. As RIT continues to expand its use of cloud technologies, advanced analytics, and Artificial Intelligence (AI), the Information Security Office plays a critical role in enabling secure innovation through strong security practices, effective risk management, and strategic partnerships across the university.

Essential Duties & Responsibilities

• Conducts vulnerability scanning and penetration testing
• Investigates services and application security. Performs security comparative review, security risk assessment, and security validation
• Performs operational duties during security incident responses, troubleshoots and performs root cause analysis for security solutions
• Analyzes, designs, and installs complex enterprise security solutions and frameworks
• Designs security solutions architecture, selects tools and partners, and configures and manages capacity, changes, documentation, and reporting
• Contributes to the documentation of security processes and procedures
• Other duties as assigned

Knowledge, Skills, & Abilities

• Knowledge of security architecture principles and best practices for system and network protection
• Knowledge of advanced cybersecurity tools, such as firewalls and intrusion prevention systems
• Skill in deploying and configuring cybersecurity tools and technologies to mitigate risks
• Skill in designing and implementing security measures to protect IT infrastructure and sensitive data
• Ability to lead complex technical projects
• Ability to analyze complex security threats and develop proactive solutions to prevent breaches
• Ability to troubleshoot and resolve advanced security incidents with minimal supervision

Minimum Education & Experience

• Bachelor's degree in related field
• 5 years of related experience
• Equivalent combination of experience & education may be considered

Job Level Overview

Specialized Contributor Level 3 - A senior-level role requiring broad understanding of the profession or field of work. Independently leads diverse and often complex assignments, projects, or programs. May act as a mentor and guide less experienced staff.

FLSA Category

Work Location

Compensation

Application Materials

When you are ready to complete an application for this position please be prepared to submit the below requested information. This will be required to ensure your application is processed in a timely manner.

Candidates must be eligible to work in the United States.

Additional Details

In compliance with NYS's Pay Transparency Act, the salary range for this position is listed above. Rochester Institute of Technology considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. The hiring process for this position may require a criminal background check and/or motor vehicle records check. Any verbal or written offer made is contingent on satisfactory results, as determined by Human Resources. RIT provides equal opportunity to all qualified individuals and does not discriminate on the basis of race, color, creed, age, marital status, sex, gender, religion, sexual orientation, gender identity, gender expression, national origin, veteran status or disability in its hiring, admissions, educational programs and activities. RIT provides reasonable accommodations to applicants with disabilities under the Rehabilitation Act, the Americans with Disabilities Act, the New York Human Rights Law, or similar applicable law.

If you need reasonable accommodation for any part of the application and hiring process, please contact the Human Resources office at 585-475-2424 or email your request to [email protected]. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.