Information Security Engineering Manager

About Grocery Outlet

Our Mission : Touching lives for the better

Our Vision : Touching lives by being the first choice for bargain‑minded consumers in the U.S.

Our Values & Behaviors : Achievement, Diversity, Entrepreneurship, Family, Fun, Integrity & Service

About the Team

Our IT team’s mission is to push the boundaries of technology with the intention of going above and beyond to aid stores and customers and deliver timely solutions to benefit all members of Grocery Outlet. Our team consists of problem solvers and go‑getters who are dedicated to being service‑oriented and solving important problems.

About the Role

We are seeking a Security Engineering Manager to design, implement, and maintain robust security systems that protect Grocery Outlet’s digital infrastructure and data. This is a highly technical hands‑on individual contributor role. You will be responsible for identifying vulnerabilities, developing security protocols, configuring security tools, responding to security incidents while ensuring compliance with SOX and CPPA / CPRA. This role reports to the Director – Information Security.

Responsibilities

• Provide technical leadership and oversight to overall security activities and initiatives.
• Install and maintain security products.
• Data Security Posture Management, Vulnerability Management, Cloud Security, Identity and Access Management, Web Application Firewall, Static Application Security Testing, etc.
• Harden systems for cyber resilience, create and maintain systems configuration baselines.
• Conduct gap analyses, security lifecycle and business impact assessments, design requirements assessments, along with new technology impact assessments.
• Review and respond to security findings and alerts generated by the Managed Security Services Provider (MSSP), covering system events, log files, and alerts across operating systems, networking equipment, DLP, EDR, and cloud environments.
• Ensure proper configuration and tuning of CrowdStrike and Cloudflare to align with the environment and can create and manage custom dashboards for ongoing visibility and reporting.
• Analyze network security alerts and events : analyze logfiles, packet captures, network flows and flowrates.
• Provide intelligence support during incident response and forensic security investigations.
• Lead pentest and security assessment remediation efforts in conjunction with Technology Operations team.
• Process and enrich information to ensure timely, actionable, high confidence IOCs are ingested and shareable.
• Conduct technical analysis based upon industry accepted threat intelligence analytical frameworks, tools, and standards.
• Assisting with SOX compliance efforts, including audit support and access provisioning.
• Participate in change management process as technical stakeholder.
• With guidance of the compliance team, assist with audit walkthroughs.

Environments, Tools, and Programming Languages

About The Pay

About You

To learn about how we collect, use and secure your personal information. Click here to see our privacy policy.

Equal Opportunity Employer. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

#J-18808-Ljbffr