Senior Security Engineer

Panera Bread•Newton, MA

4d•$119,634 - $143,561

About The Position

The Senior Security Engineer designs, implements, protects, and supports enterprise security solutions across endpoint, identity, cloud, network, and secure-access environments. This hands-on role partners with Infrastructure, Cloud Engineering, Networking, Application Development, Service Desk, and Security Operations to strengthen the organization’s security posture. The successful candidate brings expertise in endpoint protection, identity security, Zero Trust, security monitoring, incident response, and cloud security, and develops broader proficiency with enterprise network-security and secure-access platforms. The role covers security architecture and engineering; endpoint and identity security; cloud and application security; network security and secure access; and security operations and incident response. The engineer independently owns endpoint and identity-security initiatives while expanding into cloud, network-security, and secure-access engineering. The position balances operational support with architecture and automation and focuses on delivering measurable security improvements at enterprise scale. Location: Boston, MA. The job posting also identifies Newton Support Center.

Requirements

Bachelor’s or associate degree in cybersecurity, computer science, information technology, or a related discipline, or equivalent relevant experience.
Five or more years of combined IT infrastructure, endpoint engineering, identity administration, network support, or cybersecurity experience.
Demonstrated hands-on experience in at least two of the following areas: endpoint security and endpoint detection and response; identity and access management; security monitoring and incident response; cloud security; or network security and secure access.
Experience supporting enterprise endpoint, identity, networking, or security technologies.
Working knowledge of Zero Trust, MFA, IAM, VPNs, network segmentation, cloud security, and incident-response fundamentals.
Experience with security automation, scripting, APIs, or infrastructure-as-code.
Ability to troubleshoot complex technical issues and document sustainable solutions.
Ability to communicate effectively with security, infrastructure, support, application, and business teams.

Nice To Haves

Experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Intune, Entra ID, or comparable platforms.
Experience with one or more major cloud platforms, such as GCP, AWS, or Azure.
Exposure to Fortinet, Zscaler, Akamai, Cisco Meraki, or comparable network-security technologies.
Security+, CySA+, Fortinet, Zscaler, Microsoft, Google Cloud, AWS, Azure, CISSP, CCSP, CCNP, or comparable training and certifications.
Experience in large, distributed, retail, restaurant, or multi-site environments.
Experience developing operational scripts, configuration automation, security documentation, and runbooks.

Responsibilities

Design and support security solutions across on-premises, cloud, and hybrid environments.
Develop security standards, architectures, configurations, and controls aligned with organizational requirements and industry practices.
Engineer solutions for Zero Trust, endpoint protection, identity security, secure access, cloud security, threat detection, and network segmentation.
Evaluate security technologies and document technical requirements, risks, and implementation recommendations.
Engineer and maintain enterprise endpoint-protection and device-security solutions.
Implement endpoint configuration, hardening, monitoring, and compliance controls across Windows and macOS environments.
Design and support identity-security controls, including phishing-resistant MFA, conditional access, privileged access, and secure authentication.
Investigate endpoint and identity events using enterprise detection and response platforms.
Develop scripts and automation to improve configuration consistency, operational efficiency, and security visibility.
Implement IAM, network-security, logging, and workload-protection controls in cloud environments.
Support secure cloud connectivity and hybrid-cloud architectures.
Assist with protecting web applications, APIs, and internet-facing services.
Use infrastructure-as-code and automation where appropriate to deploy repeatable security controls.
Partner with cloud and application teams to identify and remediate security risks.
Support enterprise firewalls, VPNs, SD-WAN, secure web gateways, remote-access solutions, and network-security monitoring.
Assist with administration and improvement of Fortinet, Zscaler, Akamai, Cisco Meraki, or comparable enterprise platforms.
Review security policies, connectivity rules, logs, and alerts.
Support network segmentation and secure connectivity across corporate, cloud, remote, and distributed locations.
Build platform ownership through formal training and hands-on operational experience.
Monitor and investigate security events across endpoint, identity, network, and cloud platforms.
Support containment, evidence collection, root-cause analysis, remediation, and incident reporting.
Create and maintain security documentation, dashboards, metrics, procedures, and operational runbooks.
Collaborate with internal teams and security-service providers during investigations.
Identify opportunities to automate recurring security operations.