Sr Engineer, Information Security

Lowe s is a FORTUNE 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe s operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

Lowe s India, the Global Capability Center of Lowe s Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience. From supporting and launching homegrown solutions to fostering innovation through its Catalyze platform, Lowe s India plays a pivotal role in transforming home improvement retail while upholding strong commitment to social impact and sustainability. For more information, visit Lowes India

Job Summary

The primary purpose of this role is to support the design, implementation and ongoing operation of information security tools and services. This includes leading the process of translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to design and implement remediation solutions.

To be successful, the individual in this role must have strong knowledge of security practices and tools related to identity and access management along with enterprise digital certificate management systems. This role establishes and maintains programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices.

Key Responsibilities
Leads the implementation and maintenance of assigned information security solutions to ensure successful deployment and operation; develops and documents detailed standards (e.g., guidelines, processes, procedures)
Assists the Information Security team in monitoring security systems, reviewing logs, and managing information security systems
Conducts regular security vulnerability assessments and provides exception reporting and remediation plans to leadership
Designs and performs internal and external penetration validation testing to ensure that computer systems are up to date relative to all operating systems, patches, and virus protection software
Collaborates with other technology teams including Engineering to design and implement remediation solutions
Identifies, reports, and provides assistance during information security incidents as part of an Incident Response Team; reviews and responds to security alerts to investigate malicious activity
Supports evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends
Keeps up to date with exploits relevant to the retail sales environment
Solves complex architecture/design and business problems; solutions are extensible; works to simplify, optimize, remove bottlenecks, etc.
Provides mentoring and guidance to more junior level engineers; may provide feedback and direction on specific engineering tasks
Responds to escalated security issues for enterprise systems; facilitates advanced diagnosis and troubleshooting when necessary
Participates in the implementation of hardware and software changes into environments to ensure security requirements are met
Provides input into security breach response procedures; helps lead security breach response activities
Leads break/fix activities, escalating problems to senior management and/or vendors as appropriate
Analyzes the output of industry standard cybersecurity tools and identifies remediations to reduce risk and exposure of applications
Completes custom enhancements of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities
Evaluates entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities

Required Qualifications

Preferred Qualifications