Staff, Security Engineer

Macy's•Duluth, GA

4d•$129,900 - $216,400

About The Position

The Staff, Vulnerability Engineer is a specialist in Penetration Testing and Information Security Vulnerability Management. This hands-on role involves conducting penetration tests and vulnerability assessments on complex applications, operating systems, and wired and wireless networks. In response to an ever-changing threat landscape, they establish a proactive program to assess Macy’s resilience against real-world tactics, techniques, and procedures (TTPs).

Requirements

Strong knowledge of regulatory compliance requirements, including PCI-DSS, SOX, and GLBA.
Advanced knowledge in security infrastructure design and architecture for both new implementations and existing infrastructure.
Experience in designing and implementing enterprise-wide security strategies, policies, and standards.
Experience protecting large enterprise environments from internal and external attacks.
Strong understanding of network, physical, application, and web security as it relates to vulnerability management. Advanced knowledge of common vulnerabilities, testing approaches, and remediation strategies.
Expert understanding of current and emerging security technologies, defense strategies, and industry standards. Ability to determine and recommend security-related products and activities, influencing decision-making processes.
Advanced leadership, facilitation, and interpersonal skills to work across functional lines and at various levels.
Excellent written and verbal communication skills, with the ability to read, write, and interpret instructional documents.
One or more certifications such as CISSP, OSCP, OSCE, OSWE, etc.

Responsibilities

Establish a risk-based approach for evaluating and prioritizing new and emerging threats.
Stay current on emerging technology trends and the threat landscape, providing subject matter knowledge on specific adversarial threats and risks to assist with mitigation strategies.
Design, coordinate, and lead simulations based on organizationally defined threat scenarios.
Participate in reviewing and developing security strategies, best practices, policies, and procedures.
Provide leadership, share knowledge, and mentor team members.
Build working relationships with Macy’s TMRC, leadership, and third parties to identify top threats.
Develop standard Rules of Engagement for real-time testing.
Document detailed findings, analysis, and recommendations.

Benefits

Competitive pay and benefits rooted in principles of equity
Performance incentives and annual merit review
Merchandise discounts
Health and Wellness Benefits across medical, dental, vision, and additional insurance
Retirement Savings Plan with 401k match opportunity
Employee Assistance Program (mental health counseling and legal/financial advice)
Resources for continuous learning, career growth, and leadership development
8 paid holidays
Paid Time Off (first year prorated depending on start date)
Tuition reimbursement program
Colleague Resource Groups (CRGs) and give-back/volunteer opportunities