IT Cloud Security Engineer

About Us

Join us at WinCo Foods, where we're more than just a grocery retailer - we're a growing family of over 140 supermarkets in 10 states with over 22,000 employee owners. Our purpose is to make the lives of our customers and employee owners better by offering the lowest possible prices to feed their families. Currently, WinCo is the second largest Employee-Owned company in the United States. With more than 500 millionaire employee-owners in our Employee Stock Ownership Plan (ESOP). Our benefits, including top-tier medical plans and tuition support set us apart. In your role, you'll be instrumental in making a real impact in the communities we serve, embodying our purpose every day.

Overview

Job Summary

Design, implement and maintain security measures to protect WinCo Foods’ cloud environments and cloud applications (SaaS) from cyber security threats.  Work with existing security tooling to extend those protections to SaaS and cloud environments.  Identify, install and configure new security tools to expand security coverage in WinCo’s cloud environments. Proactively evaluate the security posture and configuration, and manage remediations of vulnerabilities and misconfigurations.  Respond to threat alerts and anomalous activity across cloud environments and SaaS.

Typical Duties and Responsibilities

• Maintain an atmosphere of friendly, enthusiastic customer service with an emphasis on taking care of the customer. Provide exceptional customer service by telephone, email, and in person.
• Identify security gaps or weaknesses, and recommend solutions to reduce risk to the company.
• Work with other Information Technology (IT) teams to ensure logical and physical security of all systems and data.
• Lead initiatives to implement new security solutions. Identify vendors, evaluate tools and implement the solution(s).
• Establish vulnerability-scanning procedures and work with the necessary teams to prioritize and install patches and security fixes based upon risk and impact.
• Act as the subject matter expert for IT Security on company technology projects lead by other teams.
• Develop security protection goals, objectives and metrics consistent with enterprise best practices.
• Produce periodic reports on security metrics and incidents.
• Perform log and event analysis of systems and security technologies to identify anomalies and suspicious activity.
• Develop monitoring and alerting for security technologies including IDS / IPS, firewall, vulnerability scanning, security logging and event management.
• Respond to security incidents and coordinate response, containment, forensics and mitigation.
• Conduct information security investigations and threat assessments.
• Perform maintenance, configuration and support of IDS / IPS, firewall, web proxy, vulnerability scanning, SIEM, and other security technologies.
• Promote security awareness across the organization through end-user training, knowledge transfer, and documentation of threats and vulnerabilities.
• Actively research and communicate current threats and attack vectors to IT management.
• Develop, document and update IT security procedures and policies.
• Perform on-call support for security events.
• Perform other projects and duties as needed and assigned.

Requirements

Education :

Experience :

Ability to :

Machines and Equipment Operated :

Preferred Education, Experience and / or Credentials :

The above statements are intended to describe the general nature of work performed by the employees assigned to this job.  All employees must comply with Company policies and applicable laws.  The responsibilities, duties and qualifications required of personnel may vary.

#Indeed

EEO / Inclusivity

As the WinCo Foods community continues to grow, our variety of perspectives and wide range of experiences are essential to our strategy and success. We are committed cultivating and celebrating an inclusive environment in which all employees are valued and respected.