Senior Security Technical Lead

About Lowe's

Lowe's is a Fortune 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year sales of more than $83 billion, Lowe's operates over 1,700 home improvement stores and employs approximately 300,000 associates.

Lowe's India, the Global Capability Center of Lowe's Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience.

About the Team

The Threat Vulnerability and Compliance team manages a suite of applications serving stakeholders within the information security department. We enable our security stakeholders through automation, workflow management, and break/fix activities. Among the team's areas of responsibility are endpoint detection/response, vulnerability management, configuration compliance, cloud security posture management, container workload protection, web application scanning, network security automation, governance risk and compliance workflows and automation, and managing a host of security-focused solutions.

We're looking for a Senior Engineer to join our Bangalore office. The ideal candidate will provide technical leadership and expertise in managing our security applications, driving automation, workflow management, and enhancements to support our stakeholders effectively.

Core Responsibilities:

• Serve as an administrator for security-focused application environments.
• Act as a subject matter expert and mentor for junior team members, providing guidance and technical expertise in system administration, scripting, and application customization.
• Architect and implement automation solutions using Python, PowerShell, Bash, etc. to streamline security workflows and processes.
• Drive the development and customization of workflows within security applications.
• Collaborate with cross-functional teams to integrate security tools with existing infrastructure and systems, ensuring seamless operation and interoperability.
• Collaborate with stakeholders to understand and address their requirements by taking complex business objectives and translating them into technical requirements.
• Lead break/fix activities, working with vendor support when necessary.
• Serve as a key liaison with vendors for platform enhancements and technical support, advocating for our organization's requirements and ensuring the effective utilization of security tools.
• Lead the administration and optimization of Windows, Mac, Linux, Azure, GCP, and OCI infrastructure supporting our security tools and applications.
• Continuously evaluate and recommend improvements to our security infrastructure, processes, and toolsets to enhance operational efficiency and effectiveness.
• Lead technical evaluations of pertinent new security technologies addressing emerging threats and industry trends.
• Deliver and resolve complex engineering problems spanning multiple applications to drive overall improvements in security across systems and applications.
• Lead the response to escalated security engineering issues for enterprise systems, facilitate and troubleshoot when necessary.

Years of Experience:

• 5 years of experience in IT, software engineering, or related field.
• 3-5 years information security experience (or combination of information security and application development).

Skill Set Required:

Primary Skills (must have):

• Advanced proficiency in scripting and/or development using Python, PowerShell, Bash, or a comparable language.
• Extensive experience in system administration, particularly in Windows and Linux environments.
• Deep understanding of cloud platforms such as GCP, OCI, Azure, and AWS.
• Experience working with an IT Infrastructure Library (ITIL) framework.
• Experience in delivering security product deployments, integrations, and operational efforts.
• Experience facilitating vendor security product requests for engineering requirements, enhancements, maintenance, and configuration.
• Strong leadership and mentoring abilities.
• Excellent problem-solving and analytical skills.
• Effective communication and stakeholder management skills.

Secondary Skills (desired):

• In-depth knowledge of security principles and technologies.
• Knowledge of retail regulatory scope (PCI, SOX, etc.).
• Experience with SaaS application administration and customization.
• Familiarity with workflow automation tools and methodologies.