Senior Engineer, Endpoint Security

Loews Hotels & Co; Franklin (TN); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401(k) & company match

Paid time off

Tuition reimbursement

Employee rates

Job summary

Loews Hotels & Co is seeking a Security Engineer to join our Endpoint Security Operations team in Franklin, TN. You will design, deploy, and maintain enterprise security software and infrastructure, working with IT and security colleagues to safeguard our hospitality portfolio.

You bring 5+ years in enterprise information security, hands-on endpoint technologies, and strong problem-solving; CISSP or equivalent cert strongly preferred. Travel up to 20% may be required.

Qualifications

• 5+ years of information security experience in an enterprise environment.
• Hands-on with endpoint security technologies and solutions.
• Experience triaging security events from SIEM and other tools.
• Strong documentation, incident response, and governance knowledge.

Responsibilities

• Provide subject matter expertise on endpoint security technologies and deployments.
• Enhance and maintain endpoint security platforms, including EDR and MDM.
• Perform threat analysis and triage suspicious activity and breaches.
• Develop policies, procedures, and technical documentation for endpoint security.

Skills

Endpoint security

Threat hunting

Vulnerability management

SIEM

Identity security

MDM

Cloud security

Active Directory

Education

Bachelor's degree or technical degree

CISSP certification preferred

Tools

Ivanti

SentinelOne

Palo Alto Networks

Sophos

Cisco Umbrella

Idira / CyberArk

Job description

Our Loews Hotels & Co Home Office teams provide support to all our properties throughout the United States. Our talented teams provide guidance over strategic planning, operations, revenue management, communications, marketing, finance, human resources, and information technology. This position is based at the Loews Hotels & Co Business Services Center in Franklin, TN.Who We Are: Founded in 1960, Loews Hotels & Co operates iconic hotels and resorts across the U.S. Together, our diverse and welcoming teams craft exceptional experiences in iconic destinations.Growth and belonging start here; you'll be valued for who you are and the goals you have. Whether your next career chapter involves making memories for guests or supporting our properties in our Corporate Office, every role-from Guest Services to Finance, Culinary to IT-offers opportunities to grow and make a meaningful impact.Creating a Team Member experience where you belong no matter what age, race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status that makes you, you is a daily focus for us.What We Offer:Competitive health & wellness benefits, 401(k) & company matchPaid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet BereavementTraining & Development opportunities, career growthTuition ReimbursementPet InsuranceTeam Member Hotel Rates, other discounts, perks and moreWhat We're Looking For:A motivated security professional eager to contribute to the improvement of Loews Hotels' security posture. An individual with a strong security background, committed to continuous learning and the implementation of innovative solutions. An Engineer who is ready to collaborate closely with other members of the Security Operations and IT Service teams to deploy robust security measures across the enterprise. Reporting to the Manager, Endpoint Security Operations, this role serves as a significant contributor to the development, implementation, and maintenance of endpoint security solutions that safeguard against cyber threats and vulnerabilities.Who You Are:A highly motivated and results driven self-starterAn IT security enthusiast who is passionate about technology and problem solvingA service-oriented team player who works well in a dynamic, fast paced environmentAn excellent communicator with an ability to adapt to the communication style of othersA continuous learner that stays abreast of industry knowledge and technologyVeterans and military spouses encouraged to applyWhat You'll Do:Provide subject matter expertise on endpoint security technologies including the design, configuration, integration and deployment of enterprise security software and infrastructureEnhance and maintain endpoint security platforms and processes including Anti-Virus, Anti Malware, Encryption, System Hardening, EDR, MDM, Web Content Management, DNS Security, Identity Solutions SIEM and Patch ManagementPerform threat analysis, monitor security events for signs of security breaches and triage any suspicious behaviorAssist with the health, performance, stabilization and tuning of all endpoint infrastructureWork with senior leadership on the research and analysis of emerging technologies that enhance security capabilities and support current and future business objectives; participate in and contribute to enterprise technology evaluations and roadmap discussions with third party vendorsEvaluate existing endpoint security solutions and participate in the design of strategies to enhance protection against emerging threatsAssess existing security technologies to establish opportunities for improved endpoint protection controlsEnsure security solutions, policies and procedures are sufficient to meet and respond to threats to our data and endpoint infrastructure. Recommend and provide technical support processes, metrics, and SLAsMaintain and enforce endpoint security policies and standards in alignment with corporate Governance, Security-Risk and Audit policies, procedures, industry regulation, best practices, and security frameworks (e.g., ISO 27001, NIST, CIS)Create and Deliver reports pertaining to endpoint security and complianceSupport and document the implementation of approved endpoint security software and infrastructure componentsOversee projects from inception to closure ensuring completion according to business requirements and stakeholder standardsEnsure compliance with corporate Governance, Security-Risk and Audit policies, procedures, and best practicesPerform continuous mentorship and development of junior staff members; serve as a point of contact for escalation and engagementDevelop technical documentation, policies, and procedures for endpoint security application use and support; communicate technical standards to Information Technology teams and junior team membersRegular attendance in conformance with standardsMay be required to work varying schedules to reflect business needsRequired to attend all mandatory training sessions and meetingsDemonstrate a proactive approach towards work activitiesManage multiple projects to timely, successful completionPerform other duties as assignedYour Qualifications Include:4 Year college/university degree or technical degree required or applicable industry certifications (CISSP preferred) and relevant experience required5+ years of experience in Information Security in an enterprise environment2+ years of experience as a technical project lead and primary support roleExtensive hands-on experience and expertise in endpoint security technologies and solutions to include:Privileged Access ManagementEndpoint Privilege ManagementThreat hunting and remediationExploit mitigationVulnerability assessment, management, and monitoring toolsAnti-virus/malware telemetryConfiguration and operation of Windows/MAC/Linux operating systemsTriaging security events from SIEM and other security appliancesIdentity and cyber security software-based tools, audits and complianceIncident response, documentation, and reportingMobile device management, Cloud, security, and investigationsNetwork protocols - IP, DHCP, DNSMicrosoft Active Directory, Azure Active Directory and associated componentsWeb Content ManagementPatch Management and RMMStrong knowledge of host and networked based attack methodologiesSolid understanding of various governance frameworks such as ITIL and NISTExpertise in endpoint security best practicesKnowledge of network and firewall infrastructurePreferred experience and certifications:Knowledge of Security Technologies from Ivanti, Sentinel One, Palo Alto Networks, Sophos, Cisco Umbrella and Idira (formerly CyberArk)Experience in retail, travel, restaurants, or hospitalityExperience in compliance with PCI and SOXMicrosoft Security CertificationsMust be able to safely lift and carry computer equipment (computers, monitors, servers, switches, firewalls, etc.)Excellent analytical and problem-solving skills, with the ability to troubleshoot complex security issuesEffective communication and interpersonal skills, with the ability to collaborate across teamsAbility and willingness to work a flexible schedule to include weekends and holidaysMust be willing to travel domestically or abroad up to 20% of the timeLoews Hotels & Co is an Equal Opportunity Employer committed to a diverse work culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, gender, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you would like to request a reasonable accommodation to submit an application or participate in the hiring process please contact our Human Resources team.