Senior Security Engineer

Panera LLC; Stati Uniti; In loco; USD 120.000 - 144.000; Tempo pieno

Descrizione del lavoro

Panera LLC is seeking a Senior Security Engineer in Boston, MA to design, implement, and protect enterprise security solutions across endpoint, identity, cloud, and network environments. This role collaborates with Infrastructure, Cloud Engineering, Networking, App Development, Service Desk, and Security Operations to strengthen security posture.

The candidate should have hands-on expertise in endpoint protection, identity security, Zero Trust, security monitoring, incident response, and cloud

Competenze

• 5+ years IT infra, endpoint engineering, identity administration, network support, or cybersecurity.

Mansioni

• Security Architecture and Engineering: Design and support security solutions across on-premises, cloud, and hybrid environments.

Conoscenze

Endpoint security

Identity security

Zero Trust

Security monitoring

Incident response

Cloud security

Scripting

Infrastructure-as-code

Formazione

Bachelor’s or associate degree in cybersecurity, computer science, information technology, or related discipline

Strumenti

Microsoft Defender XDR

Microsoft Defender for Endpoint

Microsoft Sentinel

Microsoft Intune

Entra ID

Fortinet

Zscaler

Cisco Meraki

AWS

Azure

GCP

Descrizione del lavoro

Senior Security Engineer Position Summary

The Senior Security Engineer is responsible for designing, implementing, protecting, and supporting enterprise security solutions across endpoint, identity, cloud, network, and secure-access environments. This hands‑on role works closely with Infrastructure, Cloud Engineering, Networking, Application Development, Service Desk, and Security Operations to strengthen the organization’s security posture. The role requires demonstrated expertise in endpoint protection, identity security, Zero Trust, security monitoring, incident response, and cloud security. The successful candidate will also be expected to develop broader proficiency across enterprise network‑security and secure‑access platforms. Location: Boston, MA

Core Responsibilities

• Security Architecture and Engineering
  • Design and support security solutions across on-premises, cloud, and hybrid environments.
  • Develop security standards, architectures, configurations, and controls aligned with organizational requirements and industry practices.
  • Engineer solutions supporting Zero Trust, endpoint protection, identity security, secure access, cloud security, threat detection, and network segmentation.
  • Evaluate security technologies and document technical requirements, risks, and implementation recommendations.
• Endpoint and Identity Security
  • Engineer and maintain enterprise endpoint‑protection and device‑security solutions.
  • Implement endpoint configuration, hardening, monitoring, and compliance controls across Windows and macOS environments.
  • Design and support identity‑security controls, including phishing‑resistant MFA, conditional access, privileged access, and secure authentication.
  • Investigate endpoint and identity events using enterprise detection and response platforms.
  • Develop scripts and automation that improve configuration consistency, operational efficiency, and security visibility.
• Cloud and Application Security
  • Implement IAM, network-security, logging, and workload‑protection controls in cloud environments.
  • Support secure cloud connectivity and hybrid‑cloud architectures.
  • Assist with protecting web applications, APIs, and internet‑facing services.
  • Use infrastructure‑as‑code and automation where appropriate to deploy repeatable security controls.
  • Partner with cloud and application teams to identify and remediate security risks.
• Network Security and Secure Access
  • Support enterprise firewalls, VPNs, SD‑WAN, secure web gateways, remote‑access solutions, and network‑security monitoring.
  • Assist with the administration and ongoing improvement of Fortinet, Zscaler, Akamai, Cisco Meraki, or comparable enterprise platforms.
  • Review security policies, connectivity rules, logs, and alerts.
  • Support network segmentation and secure connectivity across corporate, cloud, remote, and distributed locations.
  • Build increasing platform ownership through formal training and hands‑on operational experience.
• Security Operations and Incident Response
  • Monitor and investigate security events across endpoint, identity, network, and cloud platforms.
  • Support containment, evidence collection, root‑cause analysis, remediation, and incident reporting.
  • Create and maintain security documentation, dashboards metrics, procedures, and operational runbooks.
  • Collaborate with internal teams and security‑service providers during investigations.
  • Identify opportunities to automate recurring security operations.

Required Qualifications

• Bachelor’s or associate degree in cybersecurity, computer science, information technology, or a related discipline, or equivalent relevant experience.
• Five or more years of combined IT infrastructure, endpoint engineering, identity administration, network support, or cybersecurity experience.
• Demonstrated hands‑on experience in at least two of the following areas:
  • Endpoint security and endpoint detection and response
  • Identity and access management
  • Security monitoring and incident response
  • Cloud security
  • Network security and secure access
• Experience supporting enterprise endpoint, identity, networking, or security technologies.
• Working knowledge of Zero Trust, MFA, IAM, VPNs, network segmentation, cloud security, and incident‑response fundamentals.
• Experience with security automation, scripting, APIs, or infrastructure‑as‑code.
• Ability to troubleshoot complex technical issues and document sustainable solutions.
• Ability to communicate effectively with security, infrastructure, support, application, and business teams.

Preferred Qualifications

• Experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Intune, Entra ID, or comparable platforms.
• Experience with one or more major cloud platforms, such as GCP, AWS, or Azure.
• Exposure to Fortinet, Zscaler, Cisco Meraki, or comparable network‑security technologies.
• Security+, CySA+, Fortinet, Zscaler, Microsoft, Google Cloud, AWS, Azure, CISSP, CCSP, CCNP, or comparable training and certifications.
• Experience in large, distributed, retail, restaurant, or multi‑site environments.
• Experience developing operational scripts, configuration automation, security documentation, and runbooks.

Success Factors

The successful candidate will be a hands‑on engineer who can independently own endpoint and identity‑security initiatives while expanding into cloud, network‑security, and secure‑access engineering. This individual will balance operational support with architecture and automation, communicate effectively across technical and business teams, and deliver measurable security improvements at enterprise scale.

Equal Opportunity Employer: Disabled/Veterans Competitive Pay $119,634 - $143,561 annually

The actual pay offered will be determined by multiple factors, including but not limited to the candidate’s relevant experience, job‑related knowledge, skills, and geographical location. Individual compensation decisions are dependent upon the facts and circumstances of each position and candidate.

Newton Support Center

With more than 2,000 Panera LLC and independent franchise bakery‑cafes in the Panera Bread® family, and more locations opening all the time, it’s no wonder our company has been an excellent source of career and personal growth opportunities for more than 25 years. In neighborhoods across the U.S. and Canada, customers enjoy flavorful, handcrafted meals centered around freshly baked artisan bread. To us, that means serving food like we serve our own families – free of any of the items on our ‘No No’ List. Along the way, we also like to give back to our community. We enjoy working together, shoulder to shoulder with our customers, to confront a serious problem plaguing communities across this country – Hunger. Through our Panera Cares community cafes, we offer a dignified dining experience in an uplifting environment. In addition, we support our communities through day‑end donations at our bakery‑cafe locations and partner with local non‑profit organizations. It’s this warmth that you’ll find when you join Panera Bread. From our competitive compensation and benefits packages to our unique cultural values, we’re confident you’ll find us a rewarding and fun place to work.