Job description

About us KnitWell Group, a specialty retail operating company, comprises some of the most iconic brands in America – Ann Taylor, Chico's, Haven Well Within, Lane Bryant, LOFT, Soma, Talbots, White House Black Market. Individually, our brands are unique and strong. Together, we are powerful. Our common thread is our commitment to create exceptional products, provide memorable experiences, and achieve superior results. Our associates are innovators who thrive through collaboration and are dedicated to excellence. At the heart of it all are the customers we serve. We are dedicated to creating fashion that not only looks good but also makes our customers feel good. About the role The Security Engineer is a team leader that defines technical solutions to identified information security risks. Responsibilities include ensuring compliance with KnitWell’s corporate information security policies and enforcing implementation of KnitWell’s security architecture by using the Security Incident and Event Monitoring (SIEM) platform. This includes safeguarding the security of all computing platforms, data, and networking within the corporation, oversight of the security configuration, monitoring, and incident response. The impact you can have Implement and configure security applications and infrastructure to support corporate policies, federal and state security regulations, specifically SIEM experience, with Splunk experience being a plus. Be an information security Subject Matter Expert, including familiarity with Cloud implementation. Design and conduct infrastructure security assessments at all layers of the information system including networking, servers, operating systems, databases and applications. Understand a secure network infrastructure including the design of network segmentation, firewall policies, and configuration of security devices. Perform security baseline discovery of current infrastructure and identify gaps between existing procedures, policy, and industry standards/best practices Participate in investigations of computer security incidents including incident response, containment of the incident and forensics. Understand information security best practices. Serve as a Team Lead on security projects. All other information security duties as assigned. You’ll bring to the role Bachelor’s degree in Computer Science, Electrical & Computer Engineering or other related engineering discipline preferred, or equivalent work experience. 5 years in information security, with emphasis on monitoring, incident response, and compliance. CISSP or GIAC certification desirable, other industry security certifications a plus. Risk Assessment experience; knowledge of IT risk management concepts such as risk assessment, risk identification, risk response and mitigation, risk monitoring and reporting etc. Experience in a PCI Compliance environment. Experience in Cloud computing. Hands-on experience in performing security assessments over complex networks, applications, and systems. Benefits · You will be eligible to receive a merchandise discount at select KnitWell Group brands, subject to each brand’s discount policies. Support for your individual development plus opportunities for career mobility within our family of brands. A culture of giving back – local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities to support our communities.* · Medical, dental, vision insurance & 401(K).* · Employee Assistance Program (EAP). · Time off – paid time off & holidays.* · The target salary range for this role is: $105,000 - $115,000 *Any job offer will consider factors such your qualifications, relevant experience, and skills. Eligibility of certain benefits and associate programs are subject to employment type and role. Remote : This position works remotely. Occasional travel to a company office may be required. Applicants to this position must be authorized to work for any employer in the US without sponsorship. We are not providing sponsorship for this position. #LI-AP1 Location: Corporate ascena – Remote Position Type: Regular/Full time Equal Employment Opportunity The Company is an equal opportunity employer and welcomes applications from diverse candidates. Hiring decisions are based upon a candidate s qualifications as they relate to the requirements of the position under consideration and are made without regard to sex (including pregnancy), race, color, national origin, religion, age, disability, genetic information, military status, sexual orientation, gender identity, or any other category protected by applicable law. The Company is committed to providing reasonable accommodations for job applicants with disabilities. If you require an accommodation to perform the essential duties of the position you are seeking or to participate in the application process, please contact myHRSupport knitwellgroup.com. The Company will make reasonable accommodations for otherwise qualified applicants or employees, unless such accommodations would impose an undue hardship on the operations of the Company’s business. The Company will not revoke or alter a job offer based on an applicant’s request for reasonable accommodation.

Requirements

Must-haves

The impact you can have
Be an information security Subject Matter Expert, including familiarity with Cloud implementation.
Design and conduct infrastructure security assessments at all layers of the information system including networking, servers, operating systems, databases and applications.
Understand a secure network infrastructure including the design of network segmentation, firewall policies, and configuration of security devices.
Perform security baseline discovery of current infrastructure and identify gaps between existing procedures, policy, and industry standards/best practices
Participate in investigations of computer security incidents including incident response, containment of the incident and forensics.
Understand information security best practices.
Serve as a Team Lead on security projects.
All other information security duties as assigned.
You’ll bring to the role
5 years in information security, with emphasis on monitoring, incident response, and compliance.
Risk Assessment experience; knowledge of IT risk management concepts such as risk assessment, risk identification, risk response and mitigation, risk monitoring and reporting etc.
Experience in a PCI Compliance environment.
Experience in Cloud computing.
Hands-on experience in performing security assessments over complex networks, applications, and systems.
Location: Corporate ascena – Remote Position Type: Regular/Full time

Nice-to-haves

Implement and configure security applications and infrastructure to support corporate policies, federal and state security regulations, specifically SIEM experience, with Splunk experience being a plus.
Bachelor’s degree in Computer Science, Electrical & Computer Engineering or other related engineering discipline preferred, or equivalent work experience.
CISSP or GIAC certification desirable, other industry security certifications a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off