Senior Engineer, IT Security

This is a fully remote position, open to applicants in Florida, +4 more states.

📋 Description

• Oversee and safeguard all IT security services for the Shiseido Americas region.

• Create, support, and monitor both regional and global security infrastructure initiatives.

• Manage PCI and PII compliance, coordinate with QSA vendors, and execute remediation plans.

• Conduct IT risk and security assessments while formulating information security strategies and policies.

• Suggest security solutions and enhance the security infrastructure of Shiseido's network.

• Convert business requirements and regulatory obligations into suitable security controls.

• Design, implement, manage, advise on, survey, and audit security programs, policies, and procedures.

• Create security training and awareness initiatives for employees, contractors, and visitors.

• Establish metrics, KPIs, and SLAs to evaluate the effectiveness of the security program and personnel.

• Lead or provide technical assistance during significant security incident investigations.

• Ensure compliance with 24x7x365 response and notification protocols.

• Assess the complexity and feasibility of new or modified requirements.

• Maintain operational documentation, encompassing designs, manuals, and installation guides.

• Incorporate third-party security software into Shiseido's ecosystem.

• Direct daily security workflows, incident response procedures, and physical/digital security monitoring.

• Act as the primary escalation point for critical security incidents.

• Collaborate with business units to integrate security measures and coordinate emergency protocols.

• Provide regular updates on security operations status to senior leadership.

• Supervise third-party security contractors and service providers.

• Undertake additional duties as assigned.

⛳️ Requirements

• A minimum of 7–10 years of experience in a progressive information security operations or engineering team.

• Bachelor's or advanced degree in Security Engineering, Computer Science, or a related discipline.

• In-depth knowledge of application architectures, enterprise architecture, release methodologies, project management, technical support, production support, client/server applications, internet/intranet applications, and SaaS computing.

• Excellent written and verbal communication abilities.

• Practical experience with firewalls, IP networking, and network security.

• Familiarity with Intrusion Detection, DMZ, encryption, IPSec, PKI, VPNs, MPLS/VPN, site-to-site VPN tunnels, SSL/VPN, proxy services, secure SD-WAN, and DNS operations.

• Understanding of AI Security Foundations and models, workflow security, and agentic/generative AI services such as CoPilot, Claude, and Gemini.

• Comprehensive knowledge of PCI, PII, and Data Classification including preparation, mitigation, remediation, and readiness.

• Knowledge of Azure cloud architecture and Landing Zone methodology.

• Experience in cloud security and administration.

• Capability to oversee SOC managed services.

• Familiarity with Cloud Access Security Brokers (CASB).

• Experience in vulnerability management.

• Hands-on experience with Email and Web Filtering Administration.

• Practical experience in security investigation and analysis.

• Proven track record in an IT Security Engineering role.

• Experience in planning and executing comprehensive security strategies.

• CISSP certification is preferred.

• Knowledge of ZScaler Zero Trust, Palo GlobalProtect, CyberArk Privileged Access, Splunk, Qualys, Microsoft Sentinel, and LogRhythm is advantageous.

• Ability to ensure compliance with company policies and security industry regulations.

🏝️ Benefits

• Medical, Dental, & Vision Insurance.

• Life and Disability Insurance.

• Paid Time Off.

• Paid Volunteer Days.

• Paid Company Holidays.

• Paid Parental Leave.

• 401K with 6% Company Match.

• Talent Development & Learning Programs.

• Internal & International Mobility.

• Product Discounts & Annual Gratis.

• Employee Led Affinity Groups.

• Tuition Reimbursement.

• Bonus program with the potential for exceeding targets.

• Competitive benefits package.