Senior Cybersecurity Engineer at Driven Brands Inc

Job description

Company:Driven Brands Driven Brands is North America s largest automotive services company with a portfolio of iconic brands including Take 5 Oil Change®, Meineke Car Care Centers®, Maaco®, 1-800-Radiator & A/C®, Auto Glass Now®, and CARSTAR®. Our vision is to fuel the pursuit with the simplest, most convenient, and most reliable car care experience. Headquartered in Charlotte, NC, Driven Brands is more than a workplace. We re a launchpad — for careers, for dreams, and for people driven to do great things. Every day, we fuel the pursuit — for our customers chasing life s moments, for our franchisees building lasting legacies, and for each other as we grow, lead, and succeed together. Performance matters. We take pride in it. We own it. We show up for one another and for our communities. Because at Driven Brands, we re not just fixing cars. We re building futures, unlocking potential, and fueling what s possible — together. JOB DESCRIPTION: We are looking for a Senior Cybersecurity Engineer to protect our people, data, and operations from modern threats, including those enabled by AI (Artificial Intelligence). You will serve as a technical authority on both sides of cybersecurity: defending against active threats, and designing and engineering cybersecurity into every layer of our technology environment. You will partner with IT, Legal, and business leaders to reduce risk across the enterprise. How you will Own It: Threat Defense Lead investigation and containment of phishing, account compromise, and endpoint and network threats, correlating signals across endpoint, identity, email, and network data. Monitor and triage alerts, and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators. Execute rapid response actions, such as disabling accounts, revoking sessions, and blocking indicators, and document root cause and remediation for leadership and auditors. Develop and tune detections and response playbooks based on emerging threats, including AI-enabled attacks, and lessons learned from incidents. Coordinate major incident response across IT, Legal, and external response partners, and strengthen readiness through tabletop exercises and post-incident reviews. Perform forensic evidence collection and support legal holds and eDiscovery in partnership with Legal. Share in an on-call rotation providing escalation coverage. Cybersecurity Engineering Architect and engineer cybersecurity solutions across the full technology stack, including endpoints, networks, identity, email and collaboration, cloud, applications, data, AI systems, and infrastructure, from requirements and design through implementation and lifecycle management. Apply secure-by-design principles such as least privilege, defense in depth, zero trust, and segmentation, using threat modeling and architecture reviews, and maintain cybersecurity standards, reference architectures, and hardened baselines that are monitored for drift. Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities. Secure cloud and hybrid infrastructure through configuration standards, posture management, and guardrails that scale across environments. Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk. Validate and release controls through testing, staged rollouts, and change management, operate cybersecurity platforms for resilience, coverage, and telemetry quality, and evaluate and integrate new technologies through proofs of concept. Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and fixing root causes rather than applying one-off patches. Risk & Governance Assess AI and software vendors for cybersecurity, data protection, and governance risk, and deliver decision-ready recommendations. Provide technical evidence and input for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation. Manage cybersecurity vendor relationships, including renewals, service retainers, and roadmap input. What you’ll Bring: 5–8 years in cybersecurity engineering, cybersecurity operations, or incident response. Bachelor s degree in a related field, or equivalent experience. Hands-on experience engineering, securing, and administering enterprise technology (endpoints, networks, identity, cloud, email, and applications) and cybersecurity platforms, along with incident response experience. Working knowledge of NIST CSF, CIS, or ISO 27001. One or more certifications such as CISSP, CISM, GIAC, or Security . You’re Good-to-Go if you have: Sound judgment under pressure, clear communication with technical and non-technical audiences, discretion with confidential matters, a collaborative approach to influencing without formal authority, and the curiosity to keep pace with emerging technology and threats. Added Fuel if you have: Experience securing AI systems, or familiarity with AI governance frameworks such as the NIST AI Risk Management Framework. Scripting, automation, and infrastructure-as-code skills (e.g., Python). Cloud security experience across major cloud platforms. Digital forensics and eDiscovery experience. Threat hunting and third-party risk assessment experience. How Success Is Measured Threat defense: faster detection and response, and incidents closed with documented root cause. Cybersecurity engineering: systems aligned to cybersecurity baselines, strong control coverage, timely remediation of critical vulnerabilities, and automation that reduces manual work and configuration drift. Governance: strong audit outcomes and timely vendor risk decisions. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. #LI-DM1 #LI-Remote #DBCORP Position Location: North Carolina Compensation Range: $91,400.00 - $163,300.00 Compensation Frequency: Annual Base pay offered may vary depending on actual location, job-related knowledge, skills, and experience. Supplemental pay types may include commissions or bonus incentives, depending on the role. Driven Brands offers a variety of health and wellness benefits including paid time off and holiday pay. Details regarding our benefits can be found here: drivenbrandsbenefits.com Get early access to 50% of your earned wages at any time through our myFlexPay program.

Requirements

Must-haves

Company:Driven Brands
Headquartered in Charlotte, NC, Driven Brands is more than a workplace. We re a launchpad — for careers, for dreams, and for people driven to do great things.
Every day, we fuel the pursuit — for our customers chasing life s moments, for our franchisees building lasting legacies, and for each other as we grow, lead, and succeed together.
Performance matters. We take pride in it. We own it. We show up for one another and for our communities.
Because at Driven Brands, we re not just fixing cars. We re building futures, unlocking potential, and fueling what s possible — together.
Threat Defense Lead investigation and containment of phishing, account compromise, and endpoint and network threats, correlating signals across endpoint, identity, email, and network data.
Monitor and triage alerts, and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators.
Execute rapid response actions, such as disabling accounts, revoking sessions, and blocking indicators, and document root cause and remediation for leadership and auditors.
Develop and tune detections and response playbooks based on emerging threats, including AI-enabled attacks, and lessons learned from incidents.
Coordinate major incident response across IT, Legal, and external response partners, and strengthen readiness through tabletop exercises and post-incident reviews.
Perform forensic evidence collection and support legal holds and eDiscovery in partnership with Legal.
Share in an on-call rotation providing escalation coverage.
Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities.
Secure cloud and hybrid infrastructure through configuration standards, posture management, and guardrails that scale across environments.
Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk.
Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and fixing root causes rather than applying one-off patches.
Risk & Governance Assess AI and software vendors for cybersecurity, data protection, and governance risk, and deliver decision-ready recommendations.
Provide technical evidence and input for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation.
Manage cybersecurity vendor relationships, including renewals, service retainers, and roadmap input.
What you’ll Bring: 5–8 years in cybersecurity engineering, cybersecurity operations, or incident response.
Bachelor s degree in a related field, or equivalent experience.
Hands-on experience engineering, securing, and administering enterprise technology (endpoints, networks, identity, cloud, email, and applications) and cybersecurity platforms, along with incident response experience.
Working knowledge of NIST CSF, CIS, or ISO 27001.
One or more certifications such as CISSP, CISM, GIAC, or Security .

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigopython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision

Paid Time Off

Wellness