Security Engineer

About the role

J.Crew is seeking a Security Engineer to join its Information Security team. The role focuses on designing, implementing, and maintaining security controls across retail, e‑commerce, and corporate environments, ensuring resilience against evolving cyber threats while supporting seamless customer experiences.

Key responsibilities

• Design and deploy security controls for networks, applications, endpoints, and cloud platforms (AWS, Azure, GCP).
• Support identity and access management, including role‑based access and privileged account management.
• Integrate security into DevOps and CI/CD pipelines for e‑commerce applications.
• Conduct threat modeling, risk assessments, and security architecture reviews for new projects.
• Monitor security events, analyze incidents, and assist with incident response and forensics.
• Ensure compliance with PCI‑DSS, GDPR, CCPA, and related regulations.
• Research emerging threats such as ransomware, supply‑chain attacks, and API exploits, recommending proactive defenses.
• Contribute to security awareness training and act as a subject‑matter expert for business and IT partners.

Required profile

• Proven experience in information security engineering, network security, or systems engineering.
• Strong communication skills and ability to work collaboratively across teams.
• Relevant certifications (e.g., CISSP, CISM, Security+, GSEC, CCSP) are preferred.

Required skills

• Firewalls, SIEM, EDR, DLP, WAF, VPN, MFA technologies.
• Cloud security controls in AWS, Azure, or GCP.
• Scripting for automation (Python, Bash, PowerShell).
• Identity and Access Management (IAM) and privileged account management.
• Secure network design, encryption, and authentication protocols.