Senior Cybersecurity Engineer

Driven Brands Inc. • United States of America - Remote NC, NC

3d • $91,400 - $163,300 • Remote

About The Position

Driven Brands is seeking a Senior Cybersecurity Engineer to protect its people, data, and operations from modern threats, including AI-enabled threats. The role serves as a technical authority in active threat defense and in designing and engineering cybersecurity across the technology environment, partnering with IT, Legal, and business leaders to reduce enterprise risk.

The position covers threat defense, cybersecurity engineering, risk, and governance. It includes investigating and responding to security incidents; architecting and maintaining security controls across endpoints, networks, identity, email, cloud, applications, data, AI systems, and infrastructure; supporting audits and vendor assessments; and contributing to incident readiness and continuous improvement. The role shares an on-call escalation rotation.

The position is located in North Carolina and is tagged as remote. The annual compensation range is $91,400 to $163,300; actual base pay may vary by location, job-related knowledge, skills, and experience. Supplemental pay may include commissions or bonus incentives, depending on the role. Driven Brands offers health and wellness benefits, paid time off, and holiday pay. Employees can access up to 50% of earned wages at any time through the myFlexPay program.

Requirements

• 5–8+ years of experience in cybersecurity engineering, cybersecurity operations, or incident response.
• Bachelor's degree in a related field, or equivalent experience.
• Hands-on experience engineering, securing, and administering enterprise technology, including endpoints, networks, identity, cloud, email, and applications, and cybersecurity platforms.
• Incident response experience.
• Working knowledge of NIST CSF, CIS, or ISO 27001.
• One or more certifications such as CISSP, CISM, GIAC, or Security+.
• Sound judgment under pressure, clear communication with technical and non-technical audiences, discretion with confidential matters, a collaborative approach to influencing without formal authority, and curiosity about emerging technology and threats.

Nice To Haves

• Experience securing AI systems or familiarity with AI governance frameworks such as the NIST AI Risk Management Framework.
• Scripting, automation, and infrastructure-as-code skills, such as Python.
• Cloud security experience across major cloud platforms.
• Digital forensics and eDiscovery experience.
• Threat hunting and third-party risk assessment experience.

Responsibilities

• Lead investigation and containment of phishing, account compromise, and endpoint and network threats by correlating endpoint, identity, email, and network signals.
• Monitor and triage alerts and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators.
• Execute rapid-response actions such as disabling accounts, revoking sessions, and blocking indicators; document root causes and remediation for leadership and auditors.
• Develop and tune detections and response playbooks for emerging threats, including AI-enabled attacks, and apply lessons learned from incidents.
• Coordinate major incident response with IT, Legal, and external response partners; strengthen readiness with tabletop exercises and post-incident reviews.
• Collect forensic evidence and support legal holds and eDiscovery in partnership with Legal.
• Share in an on-call rotation providing escalation coverage.
• Architect and engineer cybersecurity solutions across endpoints, networks, identity, email and collaboration, cloud, applications, data, AI systems, and infrastructure, from requirements and design through implementation and lifecycle management.
• Apply secure-by-design principles, including least privilege, defense in depth, zero trust, and segmentation, using threat modeling and architecture reviews.
• Maintain cybersecurity standards, reference architectures, and hardened baselines, and monitor them for drift.
• Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities.
• Secure cloud and hybrid infrastructure using configuration standards, posture management, and scalable guardrails.
• Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk.
• Test and release controls through staged rollouts and change management; operate cybersecurity platforms for resilience, coverage, and telemetry quality; and evaluate and integrate new technologies through proofs of concept.
• Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and addressing root causes.
• Assess AI and software vendors for cybersecurity, data protection, and governance risk and deliver decision-ready recommendations.
• Provide technical evidence and input for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation.
• Manage cybersecurity vendor relationships, including renewals, service retainers, and roadmap input.

Benefits

• Health and wellness benefits.
• Paid time off.
• Holiday pay.
• Access to up to 50% of earned wages at any time through the myFlexPay program.
• Supplemental pay may include commissions or bonus incentives, depending on the role.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior