Senior Engineer, Endpoint Security

About the role

Loews Hotels & Co's Home Office teams support its properties across the United States, covering strategy, operations, revenue management, communications, marketing, finance, human resources and information technology. This Senior Engineer, Endpoint Security position is based at the Loews Hotels & Co Business Services Center in Franklin, TN, reporting to the Manager, Endpoint Security Operations. It contributes to the development, implementation and maintenance of endpoint security solutions that protect against cyber threats.

Key responsibilities

• Provide subject matter expertise on endpoint security technologies, including design, configuration, integration and deployment of enterprise security software and infrastructure.
• Maintain endpoint security platforms and processes such as anti-virus, anti-malware, encryption, system hardening, EDR, MDM, web content management, DNS security, identity solutions, SIEM and patch management.
• Analyze threats, monitor security events, triage suspicious activity and tune endpoint infrastructure.
• Research emerging technologies with senior leadership, evaluate solutions and help design strategies against emerging threats.
• Assess security technologies, ensure policies and procedures meet data and endpoint risks, and recommend metrics, SLAs and support processes.
• Enforce endpoint security policies aligned with governance, risk and audit policies and frameworks such as ISO 27001, NIST and CIS.
• Create and deliver endpoint security and compliance reports, document implementations and oversee projects from start to finish.
• Mentor junior staff, act as escalation point of contact and develop technical documentation and policies.

Required profile

• 4-year college or university degree or technical degree, or applicable industry certifications (CISSP preferred).
• 5+ years of information security experience in an enterprise environment.
• 2+ years as a technical project lead and primary support role.
• Hands-on expertise in endpoint security technologies.
• Preferred: knowledge of Ivanti, Sentinel One, Palo Alto Networks, Sophos, Cisco Umbrella and Idriya (formerly CyberArk); retail, travel, restaurant or hospitality experience; PCI and SOX compliance experience; Microsoft security certifications.
• Able to lift and carry computer equipment, work flexible schedules including weekends and holidays, and travel up to 20% of the time.

Required skills

• Windows, macOS and Linux; Microsoft Active Directory and Azure Active Directory.
• SIEM, incident response, vulnerability assessment, patch management and RMM.
• ITIL and NIST frameworks; endpoint security best practices.
• Preferred: Idriya, Sentinel One, Palo Alto Networks, Cisco Umbrella, Idriya (CyberArk).

What we offer

• Health and wellness benefits, 401(k) with company match.
• Paid sick days, vacation, holidays, bereavement leave and pet bereavement.
• Tuition reimbursement, training and development, career growth.
• Pet insurance and team member hotel rates and other perks.