Senior Engineer, IT Security Engineering

Chipotle•Quincy, MA

3d•$116,000 - $162,500•Hybrid

About The Position

As the Senior Engineer, IT Security Engineering, under minimal supervision, you will participate in the efforts to implement and mature security capabilities that protect the company's technology environment. You will partner with technology and business organizations to address complex security challenges and improve the effectiveness of security controls. This role will also help advance the use of artificial intelligence, automation, and autonomous security technologies within Security Engineering. You will identify opportunities to apply these capabilities to improve security operations, detection, investigation, vulnerability management, threat intelligence, adversarial testing, and other security engineering functions.

Requirements

BS in related field, or equivalent experience and training preferred.
5-8 years of experience leading security initiatives, projects, or cross-functional workstreams preferred.
Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.).
Ability to perform event analysis and investigation.
Strong automation and integration engineering skillset.
Comprehensive understanding of Security Risk Frameworks.
Ability to configure and manage core technologies.
Strong understanding of security engineering concepts across infrastructure, identity, endpoint, network, cloud, application, data protection, vulnerability management, detection, and response.
Experience with event logging, parsing, orchestration, and alert enrichment across security platforms.
Understanding of proper maintenance of security solutions.
Strong communication and relationship building skills.
Experience in technical writing, and ability to present information at the executive level.
Skilled at performing IT security focused application/environment design reviews.
Experience using common security testing tools and techniques to assess applications, infrastructure, cloud environments, and enterprise platforms, with the ability to identify risk and recommend practical remediation.
Understanding of how generative AI, AI agents, and autonomous technologies can be applied to cybersecurity use cases.
Experience using automation, orchestration, or AI-enabled technologies to improve security operations or engineering processes.
Deeply knowledgeable about security vulnerabilities with the ability to identify them, assess risk, and provide remediation guidance.
Knowledgeable regarding incorporating security requirements into a SDLC.
Working knowledge of cloud security principles, including identity, network segmentation, logging, vulnerability exposure, workload protection, SaaS security, and secure configuration management.
Design and implementation experience in Security solutions.

Responsibilities

Evangelize IT and AI security fundamentals, tools, processes, and acts as a consultative partner with IT and Business teams.
Develop, and integrate, and improve automated, AI-enabled, and agentic security workflows that enrich, investigate, prioritize, and respond to security events using data and capabilities from enterprise security platforms.
Perform IT security assessments and remediation activities as part of the IT security organization and ensure CMG teams adhere to the NIST Framework.
Manage a suite of IT security tools providing controls that support our security policies.
Technical ownership with current or future solution providers and work closely with the Governance Risk and Compliance team to provide analysis of external, and internal risk assessments.
Work cross functionally with all departments to provide SME level security guidance on all projects which have security impact to CMG.
Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events.
Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices.
Identify and implement opportunities to improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies.
Evaluate current and emerging security technologies, including AI-enabled and autonomous security capabilities, and provide recommendations based on technical effectiveness, operational value, risk reduction, and business requirements.
Participate as a key member in security incident response activities as well as daily Security Operational tasks.
Participate in documentation and adherence to Security Policies and Operating Procedures.
Develop and mature IT security program through interaction with Security and GRC Leadership.
Remain current with Information Security best practices.