Sr Engineer, Information Security

About Lowe&aposs

Lowes is a FORTUNE 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowes operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowes supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com

Lowes India, the Global Capability Center of Lowes Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience. From supporting and launching homegrown solutions to fostering innovation through its Catalyze platform, Lowes India plays a pivotal role in transforming home improvement retail while upholding strong commitment to social impact and sustainability. For more information, visit Lowes India

About the Team

The Threat Vulnerability and Compliance team manages a suite of applications serving stakeholders within the information security department. We enable our security stakeholders through automation, workflow management, and break/fix activities. Among the teams areas of responsibility are endpoint detection/response, vulnerability management, configuration compliance, cloud security posture management, container workload protection, web application scanning, network security automation, governance risk and compliance workflows and automation, and managing a host of security-focused solutions. The team utilizes a broad set of technical skills to support and enable our stakeholder teams success.

Job Summary:

The Threat, Vulnerability, and Compliance team is seeking a Senior Engineer to join our Bangalore, India office. The ideal candidate will provide technical leadership and expertise in managing our suite of security applications, driving automation, workflow management, and enhancements to support our stakeholders effectively.

Roles & Responsibilities:

Core Responsibilities:

• Serve as an administrator for security-focused application environments.
• Act as a subject matter expert and mentor for junior team members, providing guidance and technical expertise in system administration, scripting, and application customization.
• Architect and implement automation solutions using Python, Powershell, Bash, etc. to streamline security workflows and processes.
• Drive the development and customization of workflows within security applications.
• Collaborate with cross-functional teams to integrate security tools with existing infrastructure and systems, ensuring seamless operation and interoperability.
• Collaborate with stakeholders to understand and address their requirements by taking complex business objectives and translating them into technical requirements.
• Lead break/fix activities, working with vendor support when necessary.
• Serve as a key liaison with vendors for platform enhancements and technical support, advocating for our organization&aposs requirements and ensuring the effective utilization of security tools.
• Lead the administration and optimization of Windows, Mac, Linux, Azure, GCP, and OCI infrastructure supporting our security tools and applications.
• Continuously evaluate and recommend improvements to our security infrastructure, processes, and toolsets to enhance operational efficiency and effectiveness.
• Lead technical evaluations of pertinent new security technologies addressing emerging threats and industry trends.
• Deliver and resolve complex engineering problems spanning multiple applications to drive overall improvements in security across systems and applications.
• Lead the response to escalated security engineering issues for enterprise systems, facilitate and troubleshoot when necessary.

Years of Experience:

• 5 years of experience in IT, Software engineering or related field.
• 3-5 years Information Security experience (or combination of Information Security and Application Development)

Education Qualification & Certifications

Required Minimum Qualifications

• Bachelor&aposs Degree in Computer Science, CIS, Engineering, Cybersecurity, or related field (or equivalent work or military experience in a related field)

Skill Set Required

Primary Skills (must have)

• Advanced proficiency in scripting and/or development using Python, Powershell, Bash, or a comparable language.
• Extensive experience in system administration, particularly in Windows and Linux environments.
• Deep understanding of cloud platforms such as GCP, OCI, Azure, and AWS.
• Experience working with an IT Infrastructure Library (ITIL) framework.
• Experience in delivering security product deployments, integrations, and operational efforts.
• Experience facilitating vendor security product requests for engineering requirements, enhancements, maintenance, and configuration.
• Strong leadership and mentoring abilities.
• Excellent problem-solving and analytical skills.
• Effective communication and stakeholder management skills.

Secondary Skills (desired)

• In-depth knowledge of security principles and technologies.
• Knowledge of retail regulatory scope (PCI, SOX, etc.).
• Experience with SaaS application administration and customization.
• Familiarity with workflow automation tools and methodologies.