Sr Engineer, Information Security

Lowe's Companies, Inc.•Charlotte, NC

11d•Onsite

About The Position

The primary purpose of this role is to support the design, implementation, and ongoing operation of information security tools and services. This includes leading the process of translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to design and implement remediation solutions. To be successful, the individual in this role must have strong knowledge of security practices and tools related to identity and access management along with enterprise digital certificate management systems. This role establishes and maintains programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices.

Requirements

Bachelor’s degree Computer Science, CIS, Engineering, Cybersecurity, or related field or equivalent years of experience in lieu of education requirement, if applicable
5 Years of Experience in technology system support, software development or a related field
2 Years of Experience with information security applications and systems

Nice To Haves

Master’s degree Computer Science, CIS, Business Administration, or related field
3 Years of Experience evaluating entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities
1 Year of DevOps experience
3 Years of Experience evaluating entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities
3 Years of Experience in the custom enhancement or development of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities
5 Years of IT experience developing and implementing business systems within an organization
5 Years of Experience working with defect or incident tracking software
5 Years of Experience writing technical documentation in a software development environment
3 Years of Experience working with an IT Infrastructure Library (ITIL) framework
3 Years of Experience leading teams, with or without direct reports
5 Years of Experience working with source code control systems
Experience working with Continuous Integration/ Continuous Deployment tools
Experience with Cloud technologies
PCI ISA OSCP GPen

Responsibilities

Design, implement, and maintain enterprise network security solutions, including physical, virtual, and cloud-based firewalls (Fortinet), ensuring secure, reliable, and compliant operations.
Engineer and support network security architectures across hybrid environments, including Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud Infrastructure (OCI), and on-premises data centers.
Design, implement, and administer secure access technologies, including VPN, Zero Trust Network Access (ZTNA), Network Access Control (NAC), web proxy, IoT security, and microsegmentation solutions to support Zero Trust initiatives.
Install, upgrade, configure, and maintain firewalls, network security appliances, and related infrastructure while managing lifecycle, change control, and operational support.
Monitor, troubleshoot, and optimize enterprise security systems; investigate security events, respond to escalated issues, and lead break/fix activities to ensure service availability.
Collaborate with Infrastructure, Cloud, Network, Security Operations, and Architecture teams to design secure solutions, implement remediation plans, and integrate security into enterprise projects.
Evaluate emerging security technologies, industry trends, and threat intelligence to improve the organization's security posture and defend against evolving cyber threats.
Develop and maintain security standards, technical documentation, operational procedures, and architecture diagrams while ensuring knowledge transfer to Security Operations teams.
Automate security operations and infrastructure management using scripting and Infrastructure-as-Code tools such as Python, Ansible, Terraform, or similar technologies.
Mentor junior engineers, provide technical leadership on complex initiatives, and communicate effectively with technical teams, leadership, and business stakeholders.
Maintain a strong understanding of enterprise networking, security architecture, compliance frameworks, risk management, and project delivery best practices.