Senior Principal Security Engineer (Vulnerability Automation)

Walgreens; Deerfield (IL); On-site; USD 136,000 - 232,000; Full time

Job summary

A leading company in retail pharmacy and healthcare is seeking a Senior Principal Security Engineer focusing on Vulnerability Automation. The ideal candidate will drive improvements in application security, lead automation efforts, and work collaboratively across teams. This role requires a blend of technical expertise and business acumen to effectively communicate security risks and recommendations.

Benefits

Flexible work environment

Career development opportunities

Comprehensive benefits package

Qualifications

• 6+ years in IT Security or 9+ years equivalent experience.
• 5+ years in security/cyber forensics, threat hunting.
• Minimum 3 years of leadership experience.

Responsibilities

• Automate the use of vulnerability tools and create actionable insights.
• Manage large data sets across platforms, prioritize remediation paths.
• Collaborate with cross-functional teams to enhance security posture.

Skills

IT Security

Vulnerability management

Automation engineering

Cyber forensics

Incident response analysis

Power BI

Data modeling

Threat hunting

Education

Bachelor's degree in IT Security or related field

High School Diploma/GED with experience equivalent to Bachelor's

Tools

Rapid7 InsightVM

Microsoft Defender

GitHub Advanced Security

Job description

Senior Principal Security Engineer (Vulnerability Automation)

Join to apply for the Senior Principal Security Engineer (Vulnerability Automation) role at Walgreens

Senior Principal Security Engineer (Vulnerability Automation)

1 day ago Be among the first 25 applicants

Join to apply for the Senior Principal Security Engineer (Vulnerability Automation) role at Walgreens

This range is provided by Walgreens. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$136,000.00/yr - $231,300.00/yr

Position Summary

We are seeking a highly skilled Senior Manager of Vulnerability Automation to lead efforts in automating and operationalizing vulnerability data and translating it into actionable risk mitigation plans across applications and infrastructure. This role demands expertise in advanced automation for large-scale vulnerability data and engineering backlog management systems, secure development practices, vulnerability analytics, and cross-functional collaboration with engineering teams. The ideal candidate is both technically proficient and business-minded, capable of driving measurable improvements to our application security posture through automation at scale.

Key Responsibilities

• Automate and optimize the use of tools such as Rapid7 InsightVM, Microsoft Defender, GitHub Advanced Security, Secure Now, and other scanning or vulnerability aggregation platforms
• Organize and automatically correlate vulnerability data to highlight prioritized, logically grouped recommendations for remediation.
• Aggregate and normalize large data sets across platforms and leverage connectors to push data downstream automatically
• Build and maintain Excel-based tracking tools and Power BI dashboards to monitor trends, patch status, and KPIs over time automatically
• Communicate security posture to both technical and executive stakeholders with clarity and attacker perspective focus
• Champion Secure-by-Design and Defense-in-Depth principles throughout the software development lifecycle.
• Engage with product and engineering teams to recommend actionable remediation paths that align with dev timelines.
• Apply OWASP (e.g., Top 10, ASVS) and MITRE ATT&CK/CWE frameworks to evaluate and communicate threats and control gaps automatically
• Collaborate in building or refining application security standards based on industry best practices.
• Leverage Microsoft Defender, Rapid7, and asset inventories to automatically track how outdated operating systems or unpatched components impact application layer vulnerabilities.
• Contribute to asset classification and patch prioritization strategies.
  
  

About Walgreens

Founded in 1901, Walgreens (www.walgreens.com) has a storied heritage of caring for communities for generations and proudly serves nearly 9 million customers and patients each day across its approximately 8,500 stores throughout the U.S. and Puerto Rico, and leading omni channel platforms. Walgreens has approximately 220,000 team members, including nearly 90,000 healthcare service providers, and is committed to being the first choice for retail pharmacy and health services, building trusted relationships that create healthier futures for customers, patients, team members and communities.

Walgreens is the flagship U.S. brand of Walgreens Boots Alliance, Inc. (Nasdaq: WBA), an integrated healthcare, pharmacy and retail leader. Its retail locations are a critical point of access and convenience in thousands of communities, with Walgreens pharmacists playing a greater role as part of the healthcare system and patients care teams than ever before. Walgreens Specialty Pharmacy provides critical care and pharmacy services to millions of patients with rare disease states and complex, chronic conditions.

The actual salary an employee can expect to receive, plus bonus pursuant to the terms of any bonus plan if applicable, will depend on experience, seniority, geographic location, and other factors permitted by law. To review benefits, please visit jobs.walgreens.com/benefits More Company information is available at www.walgreensbootsalliance.com.

Basic Qualifications

• Bachelor’s degree and at least 6 years of experience in IT Security OR a High School Diploma/GED and at least 9 years of experience in IT Security
• At least 5 years of experience with security/cyber forensics, threat hunting, incident response analysis, and/or Information security consulting
• Experience establishing & maintaining relationships with individuals at all levels of the organization, including the executive level.
• Experience diagnosing, isolating, and resolving complex issues and recommending and implementing strategies to resolve problems"
• Experience leading cross-functional teams
• At least 2 years of experience contributing to financial decisions in the workplace.
• At least 3 years of direct leadership, indirect leadership and/or cross- functional team leadership.
• Willing to travel up to 10% of the time for business purposes (within state and out of state)
  
  

Preferred Qualifications

• 5+ years of experience in application security, vulnerability management, or secure software engineering.
• Strong knowledge of automation engineering and vulnerability scanning tools, especially Rapid7 InsightVM and Microsoft Defender.
• Strong proficiency in Excel (pivot tables, lookups, data modeling) and Power BI.
• Demonstrated experience translating raw security data into clear, prioritized, and contextualized risk metrics automatically
• Deep understanding of OWASP, MITRE ATT&CK, and CWE frameworks.
• Experience working with engineering teams to remediate findings
• Familiarity with software and OS lifecycle management and how it impacts application security.
• Background in software development or scripting (e.g., Python, PowerShell)
• Experience in regulated environments (e.g., PCI, HIPAA).
• Knowledge of asset management and CMDB platforms (e.g., ServiceNow).
• Industry certifications such as GWAPT, OSWE, CSSLP, or CISSP with a focus on AppSec.
  
  

Why Join Us?

• Help shape a security-first engineering culture.
• Work with experienced teams in security, IT, and product development.
• Contribute to meaningful improvements in application security across a complex and evolving enterprise landscape.
  
  

We will consider employment of qualified applicants with arrest and conviction records.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at Walgreens by 2x

Get notified about new Principal Security Engineer jobs in Deerfield, IL.

Principal Security Architect - GenAI and Emerging Technologies

Associate Director, Cloud Security Architect

BCG Platinion | Principal IT Architect, Public Sector Industry Leader (Defense & Security, Civil Sector)

Security Architect - Wealth & Asset Management

BCG Platinion | Lead IT Architect, Public Sector Industry Leader (Defense & Security, Civil Sector)

Chicago, IL $140,000.00-$190,000.00 1 week ago

Senior Security Engineer - Detection Engineering

Chicago, IL $96,326.00-$188,325.00 2 months ago

Chicago, IL $140,000.00-$160,000.00 1 month ago

Security Review Architect (Remote) - Contract Position

Security Architect - North Central region (Chicago, IL)

Security Review Architect (Remote) - Contract Position

Chicago, IL $140,000.00-$170,000.00 1 month ago

Director, Senior Cloud Security Architect

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.