Sr. Information Security Engineer

Valvoline Global

1d • Remote

About The Position

The Senior Information Security Engineer is an advanced technical authority responsible for designing, governing, and continuously improving enterprise cybersecurity capabilities. The role owns complex security engineering outcomes across assigned domains and operates with substantial independence in translating business and cyber risk into practical technical decisions. This position leads the architecture, implementation, integration, and lifecycle management of security platforms and controls. It establishes engineering standards, evaluates technology options, and provides authoritative recommendations to Information Security, IT, GRC, and business stakeholders. The Senior Engineer serves as a technical lead for high-impact, cross-functional initiatives and as an escalation point for the most complex security engineering, operational, and incident-related matters. The role influences priorities, improves engineering practices, and mentors other engineers without requiring formal people-management responsibility. Demonstrated enterprise influence, ownership of security roadmaps and standards, sound risk-based judgment, and the ability to lead through others are expected indicators of readiness for future Lead responsibilities.

Requirements

• Bachelor's degree in information systems, computer science, engineering, cybersecurity, or a related field, or equivalent combination of education and experience.
• 8+ years of progressive experience in information technology or information security, including significant experience in security engineering, cloud security, security architecture, security operations, incident response, or related disciplines.
• Demonstrated experience leading complex, enterprise-impacting initiatives is required.
• Enterprise security engineering: ability to translate cyber risk, business requirements, and threat intelligence into scalable architectures, controls, standards, and roadmaps.
• Technical authority: advanced knowledge of security platforms, cloud controls, identity and access management, network security, detection and response, vulnerability management, and secure technology integration.
• Risk-based judgment: ability to assess control effectiveness, prioritize remediation, balance security with operational needs, and make sound decisions under uncertainty.
• Program and delivery leadership: proven ability to lead complex initiatives across teams, manage dependencies and risks, and deliver measurable outcomes without relying on formal authority.
• Strategic communication: ability to present clear recommendations, tradeoffs, and risk implications to senior technical leaders, business stakeholders, and governance partners.
• Operational excellence: ability to establish repeatable engineering practices, metrics, documentation, service expectations, and continuous-improvement mechanisms.
• Technical mentorship: ability to raise team capability through design reviews, coaching, knowledge sharing, and constructive challenge.
• Hands-on capability with scripting and automation, security tooling, TCP/IP and network protocols, zero trust principles, and AWS/Azure/GCP security controls.
• Resilience and accountability: ability to lead through high-pressure incidents, own outcomes, and communicate candidly when risks, constraints, or delivery issues arise.

Nice To Haves

• Advanced degree
• CISSP, CISM, CCSP, GIAC, or equivalent industry certification preferred.
• Relevant cloud, network, identity, platform, or vendor-specific certifications are also valued.

Responsibilities

• Own the design and technical direction of complex cybersecurity engineering solutions across assigned domains. Define target-state capabilities, reference architectures, engineering standards, and lifecycle plans that align with enterprise security strategy and business risk.
• Lead cross-functional delivery of major security technology implementations and integrations. Establish technical approach, manage dependencies and risks, direct testing and operational readiness, and ensure solutions are adopted, documented, and transitioned successfully into service.
• Provide lifecycle and operational ownership for critical cybersecurity platforms and controls. Set configuration and service-quality standards, evaluate performance and coverage, drive continuous improvement, and ensure capabilities remain effective as threats, technologies, and business requirements change.
• Serve as the final technical escalation point for complex security engineering problems, high-priority incidents, and control deficiencies. Apply expert analysis, coordinate response across teams and vendors, make risk-based recommendations, and communicate status and resolution options to leadership.
• Lead security reviews and risk assessments for new or materially changed systems, services, and technology solutions. Identify control gaps, recommend proportionate mitigations, and influence architecture and delivery decisions in partnership with GRC, IT, and business owners.
• Provide technical leadership and mentorship to Information Security Engineering team members. Review designs and deliverables, establish reusable practices, coach engineers through complex work, build the capability required for succession into Lead-level responsibilities, and research emerging threats and technologies to inform the cybersecurity roadmap, investment cases, metrics, and executive communications.
• Regularly influences Information Security and IT leadership and partners with GRC, enterprise architecture, infrastructure, application teams, business owners, procurement, and third-party providers. The role must explain complex technical and risk topics to both technical and non-technical stakeholders, build alignment across competing priorities, and represent cybersecurity engineering in cross-functional governance and project forums.

Benefits

• Valvoline Global is an equal opportunity employer. We are dedicated to fostering an environment where every individual feels valued, respected, and empowered to contribute their unique perspectives and skills. We strictly prohibit discrimination and harassment of any kind, regardless of race, color, religion, age, sex, national origin, disability, genetics, veteran status, sexual orientation, gender identity, or any other legally protected characteristic.
• We are committed to ensuring accessibility throughout our recruitment process. If you require a reasonable accommodation to participate in any stage of the recruitment or selection process, please contact us at:.
• Email: [email protected]

What This Job Offers

• Job Type: Full-time
• Career Level: Senior