Security Engineer, Operations

The Security Engineer is responsible for engineering, administration, and operation of Peet's security platforms. Following best-practices this person leverages our security infrastructure tools to support Peet's defense-in-depth architecture, which ultimately protects our enterprise systems and information. Additionally, this role serves as a first-line alert and monitoring resource for anomalous security events providing rapid response in times of need. This role also provides technical support for Peet's PCI, financial, and internal security audit functions to assure accurate and efficient audit workflows.

RESPONSIBILITIES

Security System Engineering and Administration

• Operational Technology (OT) platforms
• SIEM and logging platform
• Endpoint Detection and Response platform
• Cloud-based access management platform
• Spam and Phish Filtering Platform
• Vulnerability management platform
• Anti-Virus and Endpoint Protection Platform
• Identity Governance and Administration platform
• Azure Cloud Security Platform
• Inventory and asset management tool
• DevSecOps, APIs, Azure Monitor, App Security

Security Event Monitoring, Analysis, and Response

• First-line alert monitoring
• Event analysis and triage
• Incident response activities
• Liaison to Security Operations Center (SOC) partner

Audit Support

• PCI audit
• Financial audit
• Ongoing internal system audits

- Standard user and privileged user access

- System and network configurations

- Firewall, VPN, and cloud system access

New System Deployments

• Consultive resource for new system integrations and design
• Deployment engineering support

Other Responsibilities

• On-Call duties for 24/7 incident response (rotating schedule)
• Interface/liaison with IT Infrastructure, BI, Digital, ERP, HR/Finance, and Store Systems teams on technical tasks and initiatives
• Other duties as assigned

REQUIRED QUALIFICATIONS

• Minimum 5+ years of experience in security system administration
• Detailed technical knowledge of SIEM, EPP, EDR, identity, and vulnerability management platforms
• Solid technical knowledge of core infrastructure systems and components such as AD, AzureAD, Okta, SCCM, Azure, firewalls, VPN, Multi-Factor Authentication, web servers, and cloud systems
• Mastery of tools such as Powershell, Excel, Snort, Wireshark, Nmap, Metasploit, Mimikatz, Nikto, Nessus, and BurpSuite which are used for gathering and analyzing security event, network, and vulnerability information
• Experienced in identifying and responding to anomalous security events and incidents
• Ability to contribute to the design and deployment of architected security systems and platforms
• Must have excellent communication skills, both verbal and written
• Must be detail-oriented, organized, and able to effectively perform multiple tasks
• Must demonstrate effective problem-solving skills
• Passion for coffee and customer service is mandatory
• Ability to work non-traditional business hours, including nights, weekends, and holidays
• Experience in working as a single point of contact, and making critical decisions as needed with little or no supervision
• Passions for problem solving and ability to navigate ambiguous situations
• Can present ideas and directions that lead others to action
• Flexible and adaptable to change
• Proficient in MS Office: Excel, Word, Outlook, Power Point and other Window and Mac software tools
• Time management skills, strong ability to multi-task, follow up and manage competing priorities independently
• Ability to establish and work with cross-functional teams
• Ability to work effectively within a team environment and independently
• Ability to work flexible schedule during weekdays and weekends as dictated by business needs

Peet's Home Office is a Hybrid worksite, which requires Home Office employees to work onsite 3 days per week (Emeryville, California).

At Peet's we hire the best people and are committed to supporting our employees and rewarding them for their work. The target annual base salary range for this position is $135K - $155K. The actual base salary offered depends on a variety of factors, which may include, as applicable, the applicant's qualifications for the position; years of relevant experience; specific and unique skills; level of education attained; certifications or other professional licenses held; other legitimate, non-discriminatory business factors specific to the position; and the geographic location in which the applicant lives and/or from which they will perform the job. Peet's offers a generous benefits package to full-time employees, which includes comprehensive health, dental and vision plans; a superior 401(k) plan, various paid time off programs; employee discount/perks; life insurance; disability insurance; flexible spending accounts; and an employee referral bonus program.