Senior Cybersecurity Engineer
公司：驱动品牌 Driven Brands 是北美最大的汽车服务公司，拥有包括 Take 5 Oil Change®,Meinek Car Care Center®,Maaco®,1-800-Radiator & A/C®,Auto Glass Now®和 CARSTAR®在内的标志性品牌组合。我们的愿景是用最简单，最方便，最可靠的汽车护理体验来推动追求。总部位于加州夏洛特 (Charlotte) 的 Driven Brands 不仅是一个工作场所。我们为职业生涯，梦想和想要做伟大的事情的人提供了启动平台。每天，我们为客户们追逐生活时刻，为我们的特许经营者建立持久遗产以及彼此一起成长，领导并取得成功而力力。性能是重要的。我们很自豪。我们拥有它。我们互相和社区都表现出面。因为在 Driven Brands,我们不仅修复汽车。我们正在构建未来，释放潜力，并一起炼可能的东西。工作描述：我们寻找一名高级网络安全工程师来保护我们的人员，数据和运营免受现代威胁的影响，包括人工智能 （人工智能）所实现的威胁。你将作为技术权威者，在网络安全两方面：防御主动威胁，设计和工程网络安全到我们技术环境中的每个层次。你将与 IT,法律和企业领导人合作，以减少整个企业的风险。你将如何拥有它：威胁防卫 · 负责调查和控制鱼行为，帐户妥协以及终端点和网络威胁，对终端点，身份，电子邮件和网络数据之间的信号进行相关性。·监测和分类警报，并调查异常身份和电子邮件活动，包括可疑登录和商业电子邮件妥协指标。·执行快速响应行动，如禁用账户，取消会议和阻止指标，为领导人和审计人员记录根源原因和补救。· 基于新兴威胁，包括人工智能启用攻击和事件中学到的经验教训开发和调整检测和响应书籍。·协调 IT,法律和外部响应合作伙伴之间的重大事故反应，并通过桌面练习和事件后审查加强准备性。· 与法律合作开展法医证据收集和支持法律持有权和 eDiscovery. ·参与电话轮流提供升级覆盖。网络安全工程 ·建筑师和工程师网络
查看英文原文
Company:Driven BrandsDriven Brands is North America's largest automotive services company with a portfolio of iconic brands including Take 5 Oil Change®, Meineke Car Care Centers®, Maaco®, 1-800-Radiator & A/C®, Auto Glass Now®, and CARSTAR®. Our vision is to fuel the pursuit with the simplest, most convenient, and most reliable car care experience.
Headquartered in Charlotte, NC, Driven Brands is more than a workplace. We're a launchpad — for careers, for dreams, and for people driven to do great things.
Every day, we fuel the pursuit — for our customers chasing life's moments, for our franchisees building lasting legacies, and for each other as we grow, lead, and succeed together.
Performance matters. We take pride in it. We own it. We show up for one another and for our communities.
Because at Driven Brands, we're not just fixing cars. We're building futures, unlocking potential, and fueling what's possible — together.
JOB DESCRIPTION:
We are looking for a Senior Cybersecurity Engineer to protect our people, data, and operations from modern threats, including those enabled by AI (Artificial Intelligence). You will serve as a technical authority on both sides of cybersecurity: defending against active threats, and designing and engineering cybersecurity into every layer of our technology environment. You will partner with IT, Legal, and business leaders to reduce risk across the enterprise.
How you will Own It:
Threat Defense
· Lead investigation and containment of phishing, account compromise, and endpoint and network threats, correlating signals across endpoint, identity, email, and network data.
· Monitor and triage alerts, and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators.
· Execute rapid response actions, such as disabling accounts, revoking sessions, and blocking indicators, and document root cause and remediation for leadership and auditors.
· Develop and tune detections and response playbooks based on emerging threats, including AI-enabled attacks, and lessons learned from incidents.
· Coordinate major incident response across IT, Legal, and external response partners, and strengthen readiness through tabletop exercises and post-incident reviews.
· Perform forensic evidence collection and support legal holds and eDiscovery in partnership with Legal.
· Share in an on-call rotation providing escalation coverage.
Cybersecurity Engineering
· Architect and engineer cybersecurity solutions across the full technology stack, including endpoints, networks, identity, email and collaboration, cloud, applications, data, AI systems, and infrastructure, from requirements and design through implementation and lifecycle management.
· Apply secure-by-design principles such as least privilege, defense in depth, zero trust, and segmentation, using threat modeling and architecture reviews, and maintain cybersecurity standards, reference architectures, and hardened baselines that are monitored for drift.
· Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities.
· Secure cloud and hybrid infrastructure through configuration standards, posture management, and guardrails that scale across environments.
· Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk.
· Validate and release controls through testing, staged rollouts, and change management, operate cybersecurity platforms for resilience, coverage, and telemetry quality, and evaluate and integrate new technologies through proofs of concept.
· Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and fixing root causes rather than applying one-off patches.
Risk & Governance
· Assess AI and software vendors for cybersecurity, data protection, and governance risk, and deliver decision-ready recommendations.
· Provide technical evidence and input for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation.
· Manage cybersecurity vendor relationships, including renewals, service retainers, and roadmap input.
What you’ll Bring:
- 5–8+ years in cybersecurity engineering, cybersecurity operations, or incident response.
- Bachelor's degree in a related field, or equivalent experience.
- Hands-on experience engineering, securing, and administering enterprise technology (endpoints, networks, identity, cloud, email, and applications) and cybersecurity platforms, along with incident response experience.
- Working knowledge of NIST CSF, CIS, or ISO 27001.
- One or more certifications such as CISSP, CISM, GIAC, or Security+.
You’re Good-to-Go if you have:
Sound judgment under pressure, clear communication with technical and non-technical audiences, discretion with confidential matters, a collaborative approach to influencing without formal authority, and the curiosity to keep pace with emerging technology and threats.
Added Fuel if you have:
- Experience securing AI systems, or familiarity with AI governance frameworks such as the NIST AI Risk Management Framework.
- Scripting, automation, and infrastructure-as-code skills (e.g., Python).
- Cloud security experience across major cloud platforms.
- Digital forensics and eDiscovery experience.
- Threat hunting and third-party risk assessment experience.
How Success Is Measured
·
Threat defense: faster detection and response, and incidents closed with documented root cause.
- Cybersecurity engineering: systems aligned to cybersecurity baselines, strong control coverage, timely remediation of critical vulnerabilities, and automation that reduces manual work and configuration drift.
- Governance: strong audit outcomes and timely vendor risk decisions.
Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.
#DBCORP
Position Location:
North CarolinaCompensation Range:
$91,400.00 - $163,300.00Compensation Frequency:
AnnualBase pay offered may vary depending on actual location, job-related knowledge, skills, and experience. Supplemental pay types may include commissions or bonus incentives, depending on the role. Driven Brands offers a variety of health and wellness benefits including paid time off and holiday pay. Details regarding our benefits can be found here:
Get early access to 50% of your earned wages at any time through our myFlexPay program.
Originally posted on Himalayas