KERING Cybersecurity Engineer

In this role you strengthen Americas cybersecurity operations, acting as a regional point of contact and virtual member of the global Company CERT. You will support incident response, PCI DSS compliance, and security program improvements across brands, stores, and e-commerce platforms. You collaborate with cross-functional teams in a complex, international environment and contribute to security governance and risk reduction. This position offers hands-on exposure to high-stakes incidents and a path to influence security across the Group.

• competitive salary
• health benefits including medical, dental, vision
• life and AD&D insurance
• HSAs and FSAs
• 401(k) plan
• wellbeing programs

• Serve as AMER cybersecurity point of contact for incident identification, analysis, containment, remediation, and post-incident follow-up
• Operate as a virtual member of the global Company CERT and coordinate incident response during AMER business hours
• Coordinate incident resolution with Technology teams, brand cybersecurity teams, and external providers, ensuring timely communication
• Perform technical investigations using security tools, logs, threat intelligence, and digital evidence
• Support crisis-management activities and provide operational and executive reporting
• Develop, test, and improve incident-response procedures, playbooks, escalation processes, and communications
• Lead lessons-learned exercises and track remediation actions
• Support vulnerability management and remediation activities with global and regional teams
• Contribute to the global PCI DSS program and coordinate local compliance activities
• Assist brands in defining PCI DSS scope, data flows, inventories, and control responsibilities
• Collect and maintain compliance evidence, documentation, procedures, and control records
• Participate in PCI DSS assessments, audits, penetration tests, vulnerability scans, and remediation plans
• Monitor and close identified compliance gaps with action plans
• Drive automation, integration, and process improvements across security operations and PCI DSS controls
• Produce clear operational, technical, and management-level reports

• Bachelor or Master in cybersecurity, information systems, networks, or software development
• Experience in cybersecurity detection and incident response within SOC/CSIRT/CERT environments
• Proficiency with SIEM and EDR, and understanding of Windows, Linux, networks and cloud environments
• Scripting knowledge (Python, PowerShell, Bash) and xhuatnn ability to automate investigations or responses
• Strong analytical and problem-solving skills with structured incident handling
• Experience in communicating findings across technical and non-technical stakeholders in an international setting
• Exposure to PCI DSS, payment environments, retail tech, call centers, or e-commerce platforms is advantageous
• Comfort working across multiple brands, entities, environments, and time zones within a global org
• Professional certifications (e.g., CISSP, CISM, CEH) and penetration testing certs (e.g., CEH, GXPN, GPEN) are valued
• Fluent English; other group or AMER languages are advantageous

• collaborative
• calm under pressure
• strong communication
• cybersecurity incident-response processes
• SIEM, EDR/XDR, network-security, cloud-security
• threat intelligence and logging solutions