Job description

CULTIVATE A BETTER WORLD Food served fast does not have to be a typical fast-food experience. Chipotle has always done things differently, both in and out of our restaurants. We are changing the face of fast food, starting conversations, and directly supporting efforts to shift the future of farming and food. We hope you will join us as we continue to learn, evolve, and shape what comes next on our mission to make better food accessible to everyone. THE OPPORTUNITY As the Senior Engineer, IT Security Engineering, under minimal supervision, you will participate in the efforts to implement and mature security capabilities that protect the company s technology environment. You will partner with technology and business organizations to address complex security challenges and improve the effectiveness of security controls. This role will also help advance the use of artificial intelligence, automation, and autonomous security technologies within Security Engineering. You will identify opportunities to apply these capabilities to improve security operations, detection, investigation, vulnerability management, threat intelligence, adversarial testing, and other security engineering functions. LOCATION This position will be based in our Newport Beach, CA or Columbus, OH office 4 days per week (with work from home on Friday). Remote work is not available for this role. WHAT YOU’LL DO Evangelize IT and AI security fundamentals, tools, processes, and acts as a consultative partner with IT and Business teams. Develop, and integrate, and improve automated, AI-enabled, and agentic security workflows that enrich, investigate, prioritize, and respond to security events using data and capabilities from enterprise security platforms. Perform IT security assessments and remediation activities as part of the IT security organization and ensure CMG teams adhere to the NIST Framework. Manage a suite of IT security tools providing controls that support our security policies. Technical ownership with current or future solution providers and work closely with the Governance Risk and Compliance team to provide analysis of external, and internal risk assessments. Work cross functionally with all departments to provide SME level security guidance on all projects which have security impact to CMG. Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events. Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices. Identify and implement opportunities to improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies. Evaluate current and emerging security technologies, including AI-enabled and autonomous security capabilities, and provide recommendations based on technical effectiveness, operational value, risk reduction, and business requirements. Participate as a key member in security incident response activities as well as daily Security Operational tasks. Participate in documentation and adherence to Security Policies and Operating Procedures. Develop and mature IT security program through interaction with Security and GRC Leadership. Remain current with Information Security best practices. WHAT YOU’LL BRING TO THE TABLE BS in related field, or equivalent experience and training preferred. 5-8 years of experience leading security initiatives, projects, or cross-functional workstreams preferred. Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.). Ability to perform event analysis and investigation. Strong automation and integration engineering skillset. Comprehensive understanding of Security Risk Frameworks. Ability to configure and manage core technologies. Strong understanding of security engineering concepts across infrastructure, identity, endpoint, network, cloud, application, data protection, vulnerability management, detection, and response. Experience with event logging, parsing, orchestration, and alert enrichment across security platforms. Understanding of proper maintenance of security solutions. Strong communication and relationship building skills. Experience in technical writing, and ability to present information at the executive level. Skilled at performing IT security focused application/environment design reviews. Experience using common security testing tools and techniques to assess applications, infrastructure, cloud environments, and enterprise platforms, with the ability to identify risk and recommend practical remediation. Understanding of how generative AI, AI agents, and autonomous technologies can be applied to cybersecurity use cases. Experience using automation, orchestration, or AI-enabled technologies to improve security operations or engineering processes. Deeply knowledgeable about security vulnerabilities with the ability to identify them, assess risk, and provide remediation guidance. Knowledgeable regarding incorporating security requirements into a SDLC. Working knowledge of cloud security principles, including identity, network segmentation, logging, vulnerability exposure, workload protection, SaaS security, and secure configuration management. Design and implementation experience in Security solutions. PAY TRANSPARENCY A reasonable estimate of the current base pay range for this position is $116,000.00–$162,500.00. You are also eligible for annual cash bonuses and equity awards based upon performance and other factors. Actual compensation offered may vary depending on skill level, experience, and/or education. Chipotle offers a competitive total rewards package, which includes medical, dental, and vision insurance, 401k, sick leave, vacation time, and much more. Visit jobs.chipotle.com for more details. WHO WE ARE Chipotle Mexican Grill, Inc. (NYSE: CMG) is cultivating a better world by serving responsibly sourced, classically cooked, real food with wholesome ingredients without artificial colors, flavors or preservatives. Chipotle has restaurants in the United States, Canada, the United Kingdom, France and Germany and is the only restaurant company of its size that owns and operates all its restaurants in North America and Europe. With employees passionate about providing a great guest experience, Chipotle is a longtime leader and innovator in the food industry. Chipotle is committed to making its food more accessible to everyone while continuing to be a brand with a demonstrated purpose as it leads the way in digital, technology and sustainable business practices. For more information or to place an order online, visit WWW.CHIPOTLE.COM Chipotle Mexican Grill is an equal opportunity employer that values diversity at all levels. As a people-first company rooted in values, our purpose extends beyond serving nutritious food using real ingredients. It means hiring world-class individuals and fostering a culture that champions diversity, ensures equity, and celebrates inclusion. All qualified applicants, regardless of personal characteristics, are encouraged to apply. Qualified applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and/or certain state or local laws. Please contact ADAaccommodations chipotle.com if you need an accommodation due to a disability to complete an application, job interview, and/or to otherwise participate in the hiring process. This email does not respond to non-accommodations related requests.

Requirements

Must-haves

Evangelize IT and AI security fundamentals, tools, processes, and acts as a consultative partner with IT and Business teams.
Perform IT security assessments and remediation activities as part of the IT security organization and ensure CMG teams adhere to the NIST Framework.
Manage a suite of IT security tools providing controls that support our security policies.
Technical ownership with current or future solution providers and work closely with the Governance Risk and Compliance team to provide analysis of external, and internal risk assessments.
Work cross functionally with all departments to provide SME level security guidance on all projects which have security impact to CMG.
Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events.
Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices.
Identify and implement opportunities to improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies.
Participate as a key member in security incident response activities as well as daily Security Operational tasks.
Participate in documentation and adherence to Security Policies and Operating Procedures.
Develop and mature IT security program through interaction with Security and GRC Leadership.
Remain current with Information Security best practices.
Ability to perform event analysis and investigation.
Strong automation and integration engineering skillset.
Comprehensive understanding of Security Risk Frameworks.
Ability to configure and manage core technologies.
Strong understanding of security engineering concepts across infrastructure, identity, endpoint, network, cloud, application, data protection, vulnerability management, detection, and response.
Experience with event logging, parsing, orchestration, and alert enrichment across security platforms.
Understanding of proper maintenance of security solutions.
Strong communication and relationship building skills.
Experience in technical writing, and ability to present information at the executive level.

Nice-to-haves

BS in related field, or equivalent experience and training preferred.
5-8 years of experience leading security initiatives, projects, or cross-functional workstreams preferred.
Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k