SR IT Security Engineer

Job Description

Sr. IT Security Engineer - Boise, Idaho preferred location

Job Title: SR IT Security Engineer

Pay range: ​$101,272 to $151,907

Savers Benefits  

Geographic & job eligibility rules may apply  

Healthcare Plans 

Comprehensive coverage (medical/dental/vision) at a reasonable cost 

Specialized health programs – Improve wellness (quit smoking, counseling, diabetes management, chronic joint pain) 

Paid Time Off 

Sick Pay 

Vacation Pay 

Paid vacation time begins accruing on hire date 

Accrual rate ranges from .019 to .038 per regular hour worked  

Holiday Pay 

Based on position and full-time/part-time status 

6 paid holidays plus 1 to 2 additional floating holidays  

Team member discounts 

Up to 50% off store merchandise  

Flexible spending accounts 

Use pre-tax dollars for eligible health and day care expenses  

Employee Assistance Program (EAP) 

A whole suite of free tools and resources to manage life’s challenges and maintain a healthy work-life balance  

Life insurance 

Company provided peace of mind and the option to purchase a supplemental plan  

Additional Benefits 

Annual Bonus 

Performance Merit Increases 

Disability Insurance 

Parental Leave 

Who we are: 

As one of the largest for-profit thrift operators in the United States, Canada and Australia for value priced pre-owned clothing, accessories and household goods, our mission is to champion reuse and inspire a future where secondhand is second nature. We supply our stores with gently-used, one-of-a-kind items that have been donated by the community to local nonprofit organizations. We purchase these items directly from our nonprofit partners, redirecting billions of pounds of used items away from landfills and on to our store racks and shelves for reuse, and providing our partners with valuable funding for their community-based programs and services. You’ll often hear us say that we are “Thrift Proud.” It’s the millions of loyal customers who visit our 300+ stores and our more than 22,000 team members that make it possible. Learn more about the Savers® family of thrift stores, our impact, and the #ThriftProud movement at savers.com.

Our brands are Savers (in the U.S.), 2nd Ave (in the U.S.), Value Village (in the U.S. and Canada), Unique (in the U.S.), Village des Valeurs (in Quebec) and Savers Australia.

What you can expect:

• The opportunity to celebrate uniqueness. We are made up of people from many different backgrounds, experiences, and perspectives, all with something special to contribute.
• To work in a purpose-driven company, with a business model that people love for our impact on both the planet and local communities.
• An investment in the career path interests of our people. With our aggressive store expansion plans, we recognize the importance of the continued growth and development of our team members. 

What you get:

Comprehensive onboarding and training from day one.

In-house expertise Our training department / Savers University develops and delivers robust training to every team member across our organization — from new hires to senior executives. We develop around 90% of our training internally, and partner with a variety of renowned providers to supplement our offerings.

Benefits offerings including:

• Bundled health plans such as medical, Rx, dental and vision
• Company-paid life insurance for extra protection and peace of mind
• Programs to stop smoking, diabetes management coaching, and on demand care options.
• A 401k plan with generous company matching contributions to assist you in saving for a secure financial future.
• Paid time off from work for leisure or other hobbies.
• A range of mental health services to assist you in managing daily life.

What you’ll be working on:

The Sr. IT Security Engineer is an Internal security engineering role supporting business stakeholder and IT technical teams in developing, maintaining, and operating secure line of business systems and processes across Savers. This is a technical position, requiring deep and broad technical knowledge across a range of security disciplines. We are seeking an individual who has extensive experience with security specialties including: Cloud Security, Application Security, Security Engineering, Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, and Security Risk and Compliance. Successful candidates should have a demonstrable record of practical experience in understanding security principles and controls, frameworks, as well as planning, implementation, maintenance, monitoring, and operationalization of security technologies and practices.  This role reports to the Manager, IT Security.

Essential Job Functions:

• Assume a collaborative role in driving internal security and privacy initiatives with cross functional teams.
• Become a trusted security advisor to customers and stakeholders.
• Provide security guidance on a constant stream of internal projects, technology evaluations and day-2-day operational issues.
• Conduct detailed and in-depth security assessments of business applications and processes.
• Communicate security risks, recommendations and plans to technical and non-technical teams across the business.
• Partner with Solutions Delivery and Engineering teams to establish appropriate security practices in an agile development environment.
• Participate in project teams as a dedicated Security Advisor throughout the SDLC.
• Interact directly with the security community regarding advisories, vulnerabilities, and threats.
• Analyze, assess, and respond to various security threats.
• Establish and manage risk / threat metrics, scorecards, & health monitoring.
• Build deep relationships with other IT teams and business stakeholders.
• Develop and maintain deep industry expertise in the assigned areas.

What you have:

• Experience ensuring security and privacy on the Internet, including SaaS applications and Cloud services.
• Knowledge of Internet security issues and mitigation strategies.
• Strong security tooling experience including automating tasks.
• Technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security.
• Experience in threat modeling.
• Knowledge of system security vulnerabilities and remediation techniques.
• Knowledge of network and web related protocols.
• Creative, can do approach to problem-solving.
• Excellent written and verbal communication skills.
• Strong analytical capabilities and a desire to learn new things.
• Experience working with complex, sophisticated environments.
• Resourceful and well organized.
• Willingness to provide actionable feedback in challenging situations.
• Solid experience with an interpreted programming language (PHP, Perl, Python, etc.) and scripting skills (JavaScript, Ruby, PowerShell, or other scripting languages). 

Minimum Required Education, Training and Experience: 

• 10+ years’ experience in information security.
• Industry certifications such as CISSP, CCSP, CISM and CRISC preferred
• B.S. or M.S. in computer science or related field or equivalent professional experience

Physical Requirements:

• Ability to lift and carry up to 30 lbs.:
• Ability to express or exchange ideas by means of the spoken word.
• Ability to receive detailed information through verbal communication, and to make the discriminations in sound.
• Ability to receive detailed information visually through written communication (both physical and electronic).

FLSA Status

• Exempt

Travel:

• 10 % or less

Work Address:

• Remote US - Boise, Idaho preferred

Savers is an E-Verify employer