Sr. Analyst, Automation Engineer

Restaurant Brands International • Miami, FL

1d • Onsite

About The Position

Restaurant Brands International Inc. (RBI) is one of the world's largest quick service restaurant companies, boasting nearly $45 billion in annual system-wide sales and over 32,000 restaurants across more than 120 countries and territories. RBI owns four prominent brands: TIM HORTONS®, BURGER KING®, POPEYES®, and FIREHOUSE SUBS®. The company is committed to improving sustainable outcomes related to its food, the planet, and people and communities through its Restaurant Brands for Good framework. RBI aims to grow its brands by leveraging core values, employee and franchisee relationships, and community support, benefiting from global scale and shared best practices.

RBI is seeking a Lead Automation Engineer to spearhead the design, standardization, and scaling of automation within its cybersecurity and compliance ecosystem. This role is a hands-on technical leadership position, responsible for developing secure pipelines, enabling continuous monitoring, and enhancing operational security and efficiency across a global enterprise. The position requires a 5-day, in-office work schedule in Miami, FL, to foster collaboration.

Requirements

• 3+ years of experience in DevSecOps, Security Engineering, or a related space, with a passion for building secure, scalable systems
• Strong Python skills and hands-on experience working with GitHub, CI/CD pipelines, and automation
• Experience working in AWS environments, using tools like Terraform, and building secure-by-design infrastructure and application pipelines
• A track record of automating security, compliance, or operational processes to improve efficiency and reduce risk
• Familiarity with containerization and orchestration tools like Docker and Kubernetes (EKS is a plus)
• Experience implementing application security practices (SAST, DAST, SCA) and integrating them into the development lifecycle
• Solid understanding of identity, secrets management, and modern security best practices
• Exposure to observability, logging, and security telemetry
• Experience with threat modeling or thinking through systems from a risk-based security perspective
• Working knowledge of security and compliance frameworks (NIST, PCI, SOX, or similar)
• Ability to collaborate across teams and influence technical decisions
• Experience securing APIs and microservices architectures

Nice To Haves

• Industry certifications like AWS Security Specialty, CISSP, CISM, or CKS
• Experience with tools like Ansible, policy-as-code frameworks, or SOAR platforms
• Familiarity with security tools such as GitHub Advanced Security, CrowdStrike, Qualys, Netskope, or similar
• Interest or experience in applying AI/ML or GenAI to security, automation, or engineering productivity
• Background in fast-paced, distributed environments like QSR, retail, or franchise organizations
• Additional certifications in cloud, security, or DevSecOps

Responsibilities

• Lead security automation strategy, standards, and implementation across cloud, DevSecOps, and GRC engineering domains
• Design and implement automated controls, continuous monitoring, and evidence collection aligned to NIST, PCI, and SOX requirements
• Build and enhance secure CI/CD pipelines using GitHub and CircleCI for both traditional developers and emerging AI-enabled developer communities
• Implement Infrastructure as Code with Terraform and configuration management with Ansible to improve consistency, security, and scale
• Develop automation to improve operational security, detection, and response efficiency using platforms such as CrowdStrike, CrowdStrike SIEM, GitHub Advanced Security, Qualys, and Netskope
• Design and implement container and Kubernetes (EKS) security controls including image scanning and runtime protection
• Integrate application security testing (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines
• Develop automation for secrets management and least-privilege identity enforcement
• Enhance observability and security telemetry pipelines to improve detection and response
• Support incident response automation, playbooks, and post-incident analysis
• Apply threat modeling and risk-based design principles to security automation solutions
• Integrate security findings, policy checks, code scanning, vulnerability data, and cloud controls into orchestrated engineering workflows
• Leverage AI-assisted development, intelligent automation, and developer guardrails where appropriate to improve engineering speed and security outcomes
• Partner with Infrastructure, Cloud, Cybersecurity, and Application teams to establish reusable automation patterns and self-service capabilities

Benefits

• Unique and progressive benefits
• Comprehensive global paid parental leave program that supports employees as they expand their families
• Free telemedicine
• Mental wellness support

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees