Senior Security Engineer

TriNet is a leading provider of comprehensive human resources solutions for small to midsize businesses (SMBs). We enhance business productivity by enabling our clients to outsource their HR function to one strategic partner and allowing them to focus on operating and growing their core businesses. Our full-service HR solutions include features such as payroll processing, human capital consulting, employment law compliance and employee benefits, including health insurance, retirement plans and workers’ compensation insurance. 
TriNet has a nationwide presence and an experienced executive team. Our stock is publicly traded on the NYSE under the ticker symbol TNET. If you’re passionate about innovation and making an impact on the large SMB market, come join us as we power our clients’ business success with extraordinary HR. 
Don't meet every single requirement? Studies have shown that many potential applicants discourage themselves from applying to jobs unless they meet every single requirement. TriNet always strives to hire the most qualified candidate for a particular role, ensuring we deliver outstanding results for our small and medium-size customers. So, if you're excited about this role but your past experience doesn't align perfectly with every single qualification in the job description, nobody’s perfect – and we encourage you to apply. You may just be the right candidate for this or other roles. 
A Brief Overview
As a Senior Security Engineer, you will play a crucial role in proactively strengthen TriNet’s security posture by harnessing the power of automation and innovative tools. You will work closely with cross-functional teams to implement, enhance, manage, and monitor security tools and their capabilities. This role requires a strong understanding of cybersecurity principles, excellent technical skills, and a proactive approach to security.
What you will do

• Serve as the primary owner for Microsoft Sentinel configuration and day‑to‑day operations
• Onboard and maintain log sources and data connectors (Microsoft and third‑party), ensuring data quality, normalization, and cost efficiency.
• Develop and maintain automation rules, playbooks (Logic Apps), and workflows to improve SOC efficiency and response consistency.
• Support and respond to Sentinel platform incidents, outages, and performance issues.
• Serve as the primary owner for Microsoft Purview configuration and day‑to‑day operations
• Implement and tune sensitivity labels, DLP policies, and data classification rules based on business and regulatory requirements.
• Implement configuration changes safely using documented change management processes.
• Oversee the lifecycle of assigned security tools including deployment, maintenance, and upgrades, to ensure optimal performance.
• Collaborate with cross-functional teams and provide guidance and support for assigned security tools.
• Work closely with security architects and other key stakeholders in the evaluation and selection of new tools based on latest industry trends and emerging threats.
• Perform health check monitoring various security tools and components to ensure consistent quality of service and availability to end users that satisfies SLAs.
• Create and maintain security configuration documentation, and standard operating procedures.
• Maintain awareness of emerging threats related to data security and propose changes to mitigate them.
• Research the latest data security and SIEM tools, techniques, and leading practices.
• Performs other duties as assigned

Education Qualifications

• Bachelor's Degree or equivalent experience preferred 

Experience Qualifications

• Minimum of 5 years of work experience in cybersecurity
• Experience administering Microsoft Sentinel or similar SIEM tool in a production enterprise environment
• Experience administering Microsoft Purview or similar data security tool in a production enterprise environment
• Proven experience working cross‑functionally with technical and non‑technical stakeholders.
• Proficiency in scripting and programming languages (e.g. Python, PowerShell) for automation and orchestration purposes
• Experience with KQL (or other query languages) and analytic rules.
• Familiar with Microsoft XDR (MDE, MDI, MDO, MDCA) or similar security tools. 
• Excellent analytical, problem-solving, and troubleshooting skills
• Ability to communicate effectively technical concepts to both technical and non-technical stakeholders.

Skills and Abilities

• Basic understanding of enterprise-wide technologies, including databases, operating systems, web applications, etc.
• Excellent problem solving and analytical skills.
• Ability to communicate with employees at all levels of the organization.
• Ability to work with multi-disciplinary and cross-functional teams.
• Ability to communicate technical concepts to nontechnical teams.
• Practical knowledge of risk management concepts such as risk treatment, exception management, compensating controls, and risk tolerance
• Knowledge of disaster recovery, computer forensic tools, technologies and methods 

Licenses and Certifications 

• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) or equivalent are highly desirable  

Travel Requirements 

• Minimal 

Work Environment 

• Work in a clean, pleasant, and comfortable office work setting. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable persons with disabilities to perform the essential functions. 
• This position is 100% in office.