Senior Security Engineer

We invite you to join us at Driven Brands!

Headquartered in Charlotte, NC, Driven Brands (NASDAQ: DRVN) is the largest automotive services company in North America, providing a range of consumer and commercial automotive needs, including paint, collision, glass, vehicle repair, oil change, maintenance and car wash.

With over 4,500 centers in 15 countries, Driven Brands is the parent company of some of North America’s leading automotive service brands including Take 5 Oil Change, Take 5 Car Wash, Driven Glass, Meineke, Maaco, CARSTAR, and more.  Our network services over 50 million vehicles annually and generates more than $5 billion in system-wide sales each year.

Our culture inspires high performance and innovation, enabling our employees to go further, faster in their careers. With amazing people and great brands, we confidently look forward to exciting growth ahead, and believe in following the values that support this vision.

JOB DESCRIPTION:

As a member of the Driven Brands Cybersecurity Team, the Senior Information Security Engineer will be responsible for facilitating, planning, analyzing, and designing tasks related to maturing the Cybersecurity program at Driven Brands.  The Engineer will partner and work closely with key strategic vendors, service providers as well as IT Infrastructure, Corporate Systems, and various other IT teams to plan, design &/or challenge the approaches that support cross-functional business needs and align with longer term best practice cybersecurity standards. This role will have an emphasis in supporting our various cloud platforms, so cloud security experience is required.

Responsibilities

• Creates and maintains procedural documentation related to cybersecurity processes, standards, systems, and infrastructure.
• Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices, and management approved standards.
• Defines strategic direction, secure design standards, and overall cloud security governance.
• Provides subject matter expertise and security support for the company’s various cloud platforms.
• Lead, plan, and execute projects of all sizes to improve the cloud security posture of the organization.
• Assists various IT departments with design, implementation and troubleshooting of cyber security technologies. Provide security guidance and requirements to technology teams.
• Conducts security reviews and oversees any subsequent remediation projects generated from the review.
• Pursues automating security controls to ensure threat, vulnerabilities and risk are minimized.
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains.

Requirements

• This position formulates and defines cybersecurity scope and objectives based on both user needs and a good understanding of applicable industry and regulatory requirements.
• Experience gained through college degree programs and/or certifications with an emphasis in information technology or equivalent experience.
• Experience with both migrations from on-prem to the cloud and cloud-native adoption.
• Advanced proficiency in cloud platform cybersecurity principles and best practices.
• Proven knowledge of security (CISSP, CISA, CISM, GPEN, GWAPT, GCIH, other GIAC certifications, OSCP, CEH, etc.)
• Enhances security team competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
• Knowledge of cloud security solution implementations including Cloud Security Posture Management (CSPM).
• Requires communication and presentation skills to engage technical and non-technical audiences.
• Plans security systems by evaluating solution technologies, developing requirements for security governance, processes, and workflows.
• Prepares reports by collecting, analyzing, and summarizing data and trends.
• Enhances department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value.
• 3-5 years of experience in Information Security, Cyber Security, and/or Cloud Technologies.

Compensation Range:

$78,800.00 - $144,600.00

Compensation Frequency:

Annual

Base pay offered may vary depending on actual location, job-related knowledge, skills, and experience. Supplemental pay types may include commissions or bonus incentives, depending on the role. Driven Brands offers a variety of health and wellness benefits including paid time off and holiday pay. Details regarding our benefits can be found here: https://www.drivenbrandsbenefits.com