At over 50 years old and counting, B&H has built a reputation as the trusted resource for photography and videography enthusiasts via its NYC SuperStore and its award-winning website. Long known as "The Professional’s Source", B&H is recognized by savvy consumers worldwide for its honest, knowledgeable guidance, expert tips and articles… and always-great prices.
B&H offers competitive salaries, medical benefits, a 401K plan, employee discounts and opportunities to grow within a high-energy, low-attitude environment. Make your move to B&H today!
Position Overview:
B&H is seeking an experienced Security Engineer L3 to serve as a senior technical resource responsible for designing, implementing, securing, and continuously improving the technologies that protect our enterprise environment. This role will have broad ownership across security architecture, cloud security, identity and access management, endpoint security, network security, threat detection, and infrastructure protection.
The Security Engineer L3 serves as both a hands-on engineer and a technical leader, partnering closely with Security Operations, Incident Response, Infrastructure, Cloud, DevOps, and Application teams to implement scalable security solutions that enable business growth while reducing organizational risk.
This role is ideal for someone who enjoys solving complex technical challenges, driving security initiatives from design through implementation, and influencing technical strategy across a large and evolving technology environment. The successful candidate will have deep experience with enterprise security technologies, strong security architecture expertise, and the ability to balance operational requirements with long-term security objectives.
Key Responsibilities:
Security Architecture & Engineering
- Design, implement, and maintain enterprise security controls across network, cloud, endpoint, identity, application, and infrastructure environments.
- Lead the evaluation, deployment, configuration, integration, and ongoing management of security technologies throughout their lifecycle.
- Develop secure architectures and technical standards that support business objectives while aligning with industry best practices.
- Partner with infrastructure, cloud, and application teams to ensure security is embedded into new technology initiatives and operational processes.
- Translate business requirements into secure and scalable technical solutions.
Security Operations & Platform Ownership
- Serve as the technical owner for assigned security platforms and technologies, ensuring stability, effectiveness, and continuous improvement.
- Maintain and optimize technologies including SIEM, SOAR, EDR, NDR, XDR, Firewalls, WAFs, DLP solutions, vulnerability management platforms, and other enterprise security tools.
- Monitor platform health, performance, availability, and capacity to ensure security systems remain operational and effective.
- Coordinate upgrades, migrations, integrations, and technology lifecycle management activities.
Incident Response & Threat Management
- Act as a senior escalation point during security incidents, infrastructure outages, and other high-impact operational events.
- Support incident investigations by providing engineering expertise, forensic analysis, and technical troubleshooting.
- Perform root cause analysis and develop corrective actions to prevent recurring incidents.
- Monitor emerging threats, vulnerabilities, attack techniques, and industry trends to strengthen defensive capabilities.
- Recommend and implement security improvements based on lessons learned from incidents and threat intelligence.
Cloud Security & Identity Protection
- Secure cloud environments across Microsoft Azure, Microsoft 365, AWS, and other enterprise platforms.
- Implement and maintain identity security controls, authentication systems, privileged access controls, and modern access management solutions.
- Support Zero Trust initiatives through improved authentication, authorization, network segmentation, and security monitoring capabilities.
- Design and enforce secure configurations for cloud and hybrid infrastructure environments.
Security Automation & Continuous Improvement
- Develop and support security automations that improve operational efficiency, threat detection, incident response, and compliance reporting.
- Identify opportunities to improve workflows, eliminate manual processes, and enhance security program maturity.
- Create and maintain technical documentation, standards, procedures, and platform roadmaps.
- Evaluate emerging technologies and recommend security investments that improve organizational security posture.
Compliance, Risk & Governance
- Support security compliance initiatives and audit readiness efforts across applicable regulatory and industry frameworks.
- Assist with remediation of security findings, control deficiencies, and identified risks.
- Conduct security assessments and participate in risk evaluations for new technologies, projects, and vendor relationships.
- Develop reporting and metrics to communicate security performance and risk to management and leadership teams.
Required Qualifications:
- 6+ years of experience in cybersecurity engineering, security operations, infrastructure engineering, or a related discipline.
- Strong experience implementing and supporting enterprise security technologies across multiple security domains.
- Deep understanding of network security, endpoint security, identity security, cloud security, encryption technologies, authentication mechanisms, and modern security architecture principles.
- Experience with enterprise security platforms including SIEM, SOAR, EDR/XDR, vulnerability management, DLP, firewalls, and application security tools.
- Strong understanding of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK.
- Ability to troubleshoot complex technical issues and lead remediation efforts across multiple technology domains.
- Excellent communication skills with the ability to explain technical concepts, risks, and recommendations to both technical and non-technical stakeholders.
Preferred Qualifications:
- Experience securing Microsoft Azure, Microsoft 365, AWS, or other cloud environments.
- Experience supporting compliance programs such as PCI DSS, SOX, HIPAA, or CMMC.
- Experience conducting risk assessments and security architecture reviews.
- Industry certifications such as CISSP, CISM, GCIH, GCIA, Security+, CEH, or equivalent.
- Experience developing security automation, scripting, and orchestration workflows.
Ideal Candidate:
The ideal candidate is a senior security professional who combines strong engineering expertise with a strategic mindset. They have a proven track record of designing and supporting enterprise security technologies, improving security programs, and partnering across departments to solve complex business and technical challenges.
They are equally comfortable architecting a new security solution, troubleshooting a critical production issue, participating in an incident response effort, or advising leadership on security risk. They take ownership of outcomes, continuously seek opportunities to improve security capabilities, and serve as a trusted technical resource for both the security team and the broader organization.
What Success Looks Like:
Success in this role means becoming a trusted owner of critical security platforms, reducing organizational risk through effective engineering and architecture decisions, improving the performance and maturity of security technologies, and enabling the business to operate securely at scale.
The successful Security Engineer L3 is recognized as a subject matter expert, a reliable escalation resource, and a key contributor to the company's overall cybersecurity strategy and long-term security roadmap.
We are an Equal Opportunity Employer. All persons shall have the opportunity to be considered for employment without regard to their race, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex or gender, marital status, veteran status, sexual orientation, arrest record, or any other characteristic protected by applicable federal, state or local laws.
We will endeavor to make a reasonable accommodation to the known physical or mental limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete this form or to participate in an interview, please let us know.
