Senior Security Engineer

At over 50 years old and counting, B&H has built a reputation as the trusted resource for photography and videography enthusiasts via its NYC SuperStore and its award-winning website. Long known as "The Professional’s Source", B&H is recognized by savvy consumers worldwide for its honest, knowledgeable guidance, expert tips and articles… and always-great prices.
B&H offers competitive salaries, medical benefits, a 401K plan, employee discounts and opportunities to grow within a high-energy, low-attitude environment. Make your move to B&H today!

• Design, implement, and maintain enterprise security controls across network, cloud, endpoint, identity, application, and infrastructure environments.
• Lead the evaluation, deployment, configuration, integration, and ongoing management of security technologies throughout their lifecycle.
• Develop secure architectures and technical standards that support business objectives while aligning with industry best practices.
• Partner with infrastructure, cloud, and application teams to ensure security is embedded into new technology initiatives and operational processes.
• Translate business requirements into secure and scalable technical solutions.

• Serve as the technical owner for assigned security platforms and technologies, ensuring stability, effectiveness, and continuous improvement.
• Maintain and optimize technologies including SIEM, SOAR, EDR, NDR, XDR, Firewalls, WAFs, DLP solutions, vulnerability management platforms, and other enterprise security tools.
• Monitor platform health, performance, availability, and capacity to ensure security systems remain operational and effective.
• Coordinate upgrades, migrations, integrations, and technology lifecycle management activities.

• Act as a senior escalation point during security incidents, infrastructure outages, and other high-impact operational events.
• Support incident investigations by providing engineering expertise, forensic analysis, and technical troubleshooting.
• Perform root cause analysis and develop corrective actions to prevent recurring incidents.
• Monitor emerging threats, vulnerabilities, attack techniques, and industry trends to strengthen defensive capabilities.
• Recommend and implement security improvements based on lessons learned from incidents and threat intelligence.

• Secure cloud environments across Microsoft Azure, Microsoft 365, AWS, and other enterprise platforms.
• Implement and maintain identity security controls, authentication systems, privileged access controls, and modern access management solutions.
• Support Zero Trust initiatives through improved authentication, authorization, network segmentation, and security monitoring capabilities.
• Design and enforce secure configurations for cloud and hybrid infrastructure environments.

• Develop and support security automations that improve operational efficiency, threat detection, incident response, and compliance reporting.
• Identify opportunities to improve workflows, eliminate manual processes, and enhance security program maturity.
• Create and maintain technical documentation, standards, procedures, and platform roadmaps.
• Evaluate emerging technologies and recommend security investments that improve organizational security posture.

• Support security compliance initiatives and audit readiness efforts across applicable regulatory and industry frameworks.
• Assist with remediation of security findings, control deficiencies, and identified risks.
• Conduct security assessments and participate in risk evaluations for new technologies, projects, and vendor relationships.
• Develop reporting and metrics to communicate security performance and risk to management and leadership teams.

• 6+ years of experience in cybersecurity engineering, security operations, infrastructure engineering, or a related discipline.
• Strong experience implementing and supporting enterprise security technologies across multiple security domains.
• Deep understanding of network security, endpoint security, identity security, cloud security, encryption technologies, authentication mechanisms, and modern security architecture principles.
• Experience with enterprise security platforms including SIEM, SOAR, EDR/XDR, vulnerability management, DLP, firewalls, and application security tools.
• Strong understanding of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Ability to troubleshoot complex technical issues and lead remediation efforts across multiple technology domains.
• Excellent communication skills with the ability to explain technical concepts, risks, and recommendations to both technical and non-technical stakeholders.

• Experience securing Microsoft Azure, Microsoft 365, AWS, or other cloud environments.
• Experience supporting compliance programs such as PCI DSS, SOX, HIPAA, or CMMC.
• Experience conducting risk assessments and security architecture reviews.
• Industry certifications such as CISSP, CISM, GCIH, GCIA, Security+, CEH, or equivalent.
• Experience developing security automation, scripting, and orchestration workflows.

We are an Equal Opportunity Employer.  All persons shall have the opportunity to be considered for employment without regard to their race, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex or gender, marital status, veteran status, sexual orientation, arrest record, or any other characteristic protected by applicable federal, state or local laws.
We will endeavor to make a reasonable accommodation to the known physical or mental limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business.   If you believe you require such assistance to complete this form or to participate in an interview, please let us know.