Information Security Engineer

Stanley Black & Decker, Inc. • Charlotte, NC

1d • $110,600 - $178,000 • Onsite

About The Position

The Information Security Engineer implements, administers, and provides oversight of enterprise security technologies across Stanley Black & Decker’s global business environment. The role configures and manages security hardware and software, strengthens preventive and detective controls, and supports secure adoption of modern technologies, including AI-enabled solutions.

The engineer supports diverse business applications, platforms, and infrastructure while adhering to compliance requirements, operational risk controls, regulatory standards, and company policies. The role calls for technical proficiency across software, system, network, cloud, and data security in large enterprise environments. The successful candidate partners with business and technology teams to improve security architecture, reduce risk, and support secure innovation at scale.

This position is based in Charlotte, North Carolina, and is identified as onsite. It is not eligible for visa sponsorship. The annual full-time salary range is $110,600 to $178,000; the offered salary may vary based on factors such as location, qualifications, skills, and experience.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Cyber Security, or an equivalent combination of education, training, or work experience.
• At least 5 years of experience in an IT role focused on information security.
• Hands-on experience with security controls such as EPP/EDR, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs, WAF, SSE, SASE, or CASB, and understanding of their role in defense in depth.
• Experience with security engineering, security architecture, control validation, and risk reduction across enterprise environments.
• Familiarity with AI security concepts, including securing AI-enabled applications, protecting sensitive data in AI workflows, evaluating AI-related risks, and supporting responsible AI governance.
• Solid understanding of network, workstation, server, cloud, and application security configuration.
• Familiarity with NIST CSF, COBIT, ISO 27001, and PCI DSS.
• Ability to establish collaborative relationships with business and technology partners.
• The posting lists CISSP, CISM, GIAC, SSCP, GSEC, CEH, and Security+ certifications as preferred or required.

Nice To Haves

• One or more of the following industry certifications: CISSP, CISM, GIAC, SSCP, GSEC, CEH, or Security+.

Responsibilities

• Implement, manage, maintain, and upgrade security technologies, including vulnerability scanning solutions, IDS/IPS tools, endpoint protection, DLP, SIEM, and cloud security controls.
• Create, assess, and improve security configurations and control effectiveness across endpoints, servers, networks, cloud platforms, and enterprise applications.
• Help define and implement AI security controls, assess risks associated with AI-enabled tools and services, and promote secure enterprise use of AI.
• Partner with architecture, infrastructure, application, and business teams to identify risks in new and emerging technologies and recommend safeguards and compensating controls.
• Review, update, and enforce data security practices; test for exposures and work with platform owners on remediation.
• Support governance for data protection, secure configuration, access controls, and responsible AI usage in line with enterprise policies and regulatory expectations.
• Provide technical guidance and cybersecurity best practices to team members and business partners through coaching, collaboration, and knowledge sharing.
• Coordinate across teams and departments on internal programs and projects, including resource planning, prioritization, scheduling, and task completion.
• Improve security engineering capabilities, standards, and processes to support a resilient and scalable cybersecurity program.

Benefits

• Medical insurance
• Dental insurance
• Life insurance
• Vision insurance
• Disability benefits
• 401(k)
• Employee Stock Purchase Plan
• Paid time off, including vacation, holidays, and personal days
• Tuition reimbursement
• Wellness program
• Discounts on Stanley Black & Decker tools, products, and partner programs
• Learning and development resources, including a digital learning portal, Lean Academy, and online university
• Potential eligibility for annual merit increases

What This Job Offers

• Job Type: Full-time
• Career Level: Senior