Demonstrated mastery of 1 security domain as outlined within the CISSP CBK (Security & Risk Management, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Assessment & Testing, Security Operations, Software Development Security).
Manage Identification, prioritization, and remediation guidance of security vulnerabilities & threats.
Manage the evaluation and use of security technologies and tools, including, but not limited to technologies for Network Security, IAM, IDS/IPS, WAF, SIEM, DLP, VM, EDR, etc.
Manage the assessment of potential threats and risks to systems and technologies, driving remediation with internal and external partners.
Collaborate on cross functional projects inside and outside of Enterprise Security to ensure that security concerns are addressed throughout the project life cycle. Ensures security projects are delivered on time and on budget.
Strong Understanding of technological trends and developments in technology.
Track security events and incidents from initial detection through final resolution.
Develop and maintain strategic relationships with IT and business partners, while leading through influence.
Ability to effectively present & interact with various levels of senior leadership.
Manage approval, tracking and reporting any security exceptions as the need arises.
Strong Understanding of information security risks, threats, and controls.
Strong Understanding of secure coding standards, best practices, and SecDevOps.
Strong Understanding of cloud platforms and how to properly implement security best practices.
Understanding of core IT concepts and functions.
Qualifications
Bachelor's Degree in Information Security, Software Development, or another related technical discipline. - Preferred
7 years of experience in Information Security, Cyber Security.
2 years of experience in Object oriented programming languages: C#, Java,.Net, Python or JavaScript. Knowledge of back-end frameworks such as Spring,.NET, or Node, as well as familiarity with modern front-end frameworks such as Angular or React.
Entry level cybersecurity certifications (Security +, (ISC)2 Associate, GSEC, CEH, etc.) - Preferred
CISSP - Preferred
Certified Cloud Security Professional (CCSP), Professional Cloud Security Engineer by Google, Offensive Security, Certificate of Cloud Security Knowledge (CCSK), Microsoft Certified Azure Security Engineer Associate (AZ-500), AWS Certified Security – Specialty - Preferred
Information Technology - Preferred
Management - Preferred
Communication - Preferred
Troubleshooting (Problem Solving) - Preferred
Wireless Communications - Preferred
Network Security - Preferred
Enterprise Security - Preferred
Firewall - Preferred
Incident Response - Preferred
Security Engineering - Preferred
Paychex - Preferred
Security Systems - Preferred
Proxy Servers - Preferred
Python (Programming Language) - Preferred
Security Controls - Preferred
Compensation
In the spirit of pay transparency, we are excited to share that the base pay range for this position is $114,200 - $179,500 per year. Please keep in mind that this range is the base pay only and does not consider other components that make up the total rewards package for the position. If you are hired at Paychex, your overall compensation will be determined based on factors such as geographic location, skills, education, and/or experience which may result in total compensation outside of this range.
Live the Paychex Values
Act with uncompromising integrity.
Provide outstanding service and build trusted relationships.
Drive innovation in our products and services and continually improve our processes.
Work in partnership and support each other.
Be personally accountable and deliver on commitments.
Treat each other with respect and dignity.
What's in it for you?
We value your well-being: We provide over 21 comprehensive rewards, including medical coverage, virtual wellness classes, tuition reimbursement, 401(k) + employer match, adoption assistance, financial assistance, and much more.
We value your time: From paid time off to company holidays, culture days, and comprehensive work-life balance programs, we will ensure you have the flexibility you need to be your best.
We value your development: Our award-winning training and development programs empower our employees with ongoing learning opportunities to give you the building blocks to grow your career.
We value your perspective: Our company culture reflects the diversity of our employees. We want you to be you and your voice to be heard.
We value our communities: We offer paid time off for volunteerism and promote many company-wide and local initiatives that benefit organizations you care about.
Note: The benefits described apply to full-time employees. Benefits for part-time, contract, and intern roles may vary.
Not sure if you meet every requirement?
At Paychex, we know that great talent comes in many forms. If you're passionate about the role but don't check every box, we still encourage you to apply. You might be the right fit - either for this position or another opportunity with us.
Paychex is an equal opportunity employer. We are committed to fostering a respectful and inclusive workplace where all individuals are treated fairly and evaluated based on their qualifications, experience, and merit. We comply with all applicable federal, state, and local laws prohibiting discrimination in employment.
Demonstrated mastery of 1 security domain as outlined within the CISSP CBK (Security & Risk Management, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Assessment & Testing, Security Operations, Software Development Security).
Manage Identification, prioritization, and remediation guidance of security vulnerabilities & threats.
Manage the evaluation and use of security technologies and tools, including, but not limited to technologies for Network Security, IAM, IDS/IPS, WAF, SIEM, DLP, VM, EDR, etc.
Manage the assessment of potential threats and risks to systems and technologies, driving remediation with internal and external partners.
Collaborate on cross functional projects inside and outside of Enterprise Security to ensure that security concerns are addressed throughout the project life cycle. Ensures security projects are delivered on time and on budget.
Strong Understanding of technological trends and developments in technology.
Track security events and incidents from initial detection through final resolution.
Develop and maintain strategic relationships with IT and business partners, while leading through influence.
Ability to effectively present & interact with various levels of senior leadership.
Manage approval, tracking and reporting any security exceptions as the need arises.
Strong Understanding of information security risks, threats, and controls.
Strong Understanding of secure coding standards, best practices, and SecDevOps.
Strong Understanding of cloud platforms and how to properly implement security best practices.
Understanding of core IT concepts and functions.
Bachelor's Degree in Information Security, Software Development, or another related technical discipline. - Preferred
7 years of experience in Information Security, Cyber Security.
2 years of experience in Object oriented programming languages: C#, Java,.Net, Python or JavaScript. Knowledge of back-end frameworks such as Spring,.NET, or Node, as well as familiarity with modern front-end frameworks such as Angular or React.
Entry level cybersecurity certifications (Security +, (ISC)2 Associate, GSEC, CEH, etc.) - Preferred
CISSP - Preferred
Certified Cloud Security Professional (CCSP), Professional Cloud Security Engineer by Google, Offensive Security, Certificate of Cloud Security Knowledge (CCSK), Microsoft Certified Azure Security Engineer Associate (AZ-500), AWS Certified Security – Specialty - Preferred
Information Technology - Preferred
Management - Preferred
Communication - Preferred
Troubleshooting (Problem Solving) - Preferred
Wireless Communications - Preferred
Network Security - Preferred
Enterprise Security - Preferred
Firewall - Preferred
Incident Response - Preferred
Security Engineering - Preferred
Paychex - Preferred
Security Systems - Preferred
Proxy Servers - Preferred
Python (Programming Language) - Preferred
Security Controls - Preferred