Senior Engineer, Security Engineering

Chipotle Mexican Grill; Montgomery (AL); On-site; USD 112,000 - 156,000; Full time

Benefits offered by this job

Annual bonus

Equity awards

Medical insurance

Dental insurance

Vision insurance

401k

Sick leave

Vacation time

Job summary

Chipotle Mexican Grill is seeking a Senior Engineer for Security Engineering to advance our security posture. You will analyze events, drive risk assessments, and implement solutions under the NIST framework.

The role requires 5–8 years in IT security engineering, strong collaboration with IT and business teams, and a focus on threat detection, incident response, and secure SDLC. Based in the U.S., with competitive rewards and benefits.

Qualifications

• BS in related field or equivalent experience.
• 5-8 years IT security engineering experience.
• Certifications such as CISSP, CCSP, CCSK preferred.

Responsibilities

• Evangelize IT security fundamentals to teams.
• Perform IT security assessments and remediation per NIST.
• Manage security tools and policies.
• Provide guidance on projects with security impact.

Skills

Security analytics

NIST framework knowledge

Vulnerability assessment

Security incident response

Threat modeling

Communication skills

Education

BS in related field

Job description

Senior Engineer, Security Engineering

Full job description: Senior Engineer, Security Engineering (24010671)

CULTIVATING A BETTER WORLD. Food served fast does not have to be a typical fast-food experience. Chipotle has always done things differently, both in and out of our restaurants. We are changing the face of fast food, starting conversations, and directly supporting efforts to shift the future of farming and food. We hope you will join us as we continue to learn, evolve, and shape what comes next on our mission to make better food accessible to everyone.

THE OPPORTUNITY: With minimal supervision, the Senior Engineer, Security Engineering participates in efforts to implement security capabilities, assist other technology and business organizations in the implementation of solutions and strategies to complex challenges, with adherence to the NIST framework. This individual will perform analysis of security events received through native platforms, third party, or internal reporting sources.

What You’ll Do

• Evangelize IT security fundamentals, tools, processes, and acts as a consultative partner with IT and Business teams.
• Performs IT security assessments and remediation activities as part of the IT security organization and ensures CMG teams adhere to the NIST Framework.
• Manage a suite of IT security tools providing controls that support our security policies.
• Technical ownership with current or future solution providers, and work closely with Governance Risk and Compliance team to provide analysis of external, and internal risk assessments.
• Provide Security Guidance through project participation - Work cross functionally with all departments for SME level security guidance on all projects which have security impact to CMG.
• Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events.
• Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices.
• Make recommendations on toolset and process modifications and improvements and production IT security support.
• Perform the Evaluation and Recommendation of current and future technology solutions to mitigate risk to the business.
• Participate as a key member in security incident response activities as well as daily Security Operational tasks.
• Participate in documentation and adherence to Security Policies and Operating Procedures.

What You’ll Bring To The Table

• BS in related field, or equivalent experience and training required.
• 5-8 years of experience in IT Security Engineering or related field.
• Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, etc).
• Ability to perform event analysis and investigation.
• Comprehensive understanding of Security Risk Frameworks.
• Ability to configure and manage core technologies.
• Expert level understanding of security skills and concepts.
• Extensive networking knowledge in one or more of CMG's core technologies.
• Functional knowledge of event logging, parsing and orchestration.
• Understanding of proper maintenance of security solutions.
• Strong communication and relationship building skills.
• Experience in technical writing, and ability to present information at the executive level.
• Skilled at performing IT security focused application/environment design reviews.
• Experience using common security testing tools and techniques to perform a variety of security assessments across multiple platforms with significant expertise in either web or mobile penetration testing.
• Deeply knowledgeable about security vulnerabilities with the ability to identify them, assess risk, and provide remediation guidance.
• Knowledgeable regarding incorporating security requirements into a SDLC.
• Functional knowledge of event logging, parsing and orchestration.
• Design and implementation experience in Security solutions.
• SME level participation with ePMO, Architecture, and Leadership activities.
• Development and maturation of IT security program through interaction with Security and GRC Leadership.
• Remain current with Information Security best practices.

Primary Location: Ohio - Columbus - 8890 - 500 Neil Ave-(08890) 500 Neil Ave Columbus 43215

Pay Transparency

A reasonable estimate of the current base salary range for this position is $112,000 to $156,000. You are also eligible for annual cash bonuses and equity awards based upon performance and other factors. Actual compensation offered may vary depending on skill level, experience, and/or education. Chipotle offers a competitive total rewards package, which includes medical, dental, and vision insurance, 401k, sick leave, vacation time, and much more.

Equal Opportunity Employer

Chipotle Mexican Grill is an equal opportunity employer that values diversity at all levels. As a people-first company rooted in values, our purpose extends beyond serving nutritious food using real ingredients. It means hiring world-class individuals and fostering a culture that champions diversity, ensures equity, and celebrates inclusion. All qualified applicants, regardless of personal characteristics, are encouraged to apply. Qualified applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and/or certain state or local laws. Please contact if you need an accommodation due to a disability to complete an application, job interview, and/or to otherwise participate in the hiring process. This email does not respond to non-accommodations related requests.