Macy's · 4 hours ago
Lead Security Engineer - Vulnerability Management
Macy's is a renowned retail company with a rich history of over 160 years. They are seeking a Lead Security Engineer specializing in Vulnerability Management to conduct vulnerability assessments and establish a proactive program against emerging threats. The role includes developing security strategies and mentoring team members while collaborating with various stakeholders to enhance security resilience.
Consumer GoodsFashionRetail
Responsibilities
Establish a risk-based approach for evaluating and prioritizing new and emerging threats
Stay current on emerging technology trends and the threat landscape, providing subject matter knowledge on specific adversarial threats and risks to assist with mitigation strategies
Understanding and knowledge of PCI requirements relating to vulnerability management
Participate in reviewing and developing security strategies, best practices, policies, and procedures
Provide leadership, share knowledge, and mentor team members
Build working relationships with Macy’s TMRC, leadership, and third parties to identify top threats
Develop new ways to manage the vulnerability lifecycle of discovered vulnerabilities
Document detailed findings, analysis, and recommendations
Foster an environment of acceptance and respect that strengthens relationships, and ensures authentic connections with colleagues, customers, and communities
Qualification
Required
Candidates with a bachelor's degree or equivalent work experience in a related field are encouraged to apply
8-10 years of experience in Information Security or an equivalent combination of education and experience
Strong knowledge of regulatory compliance requirements, including PCI-DSS, SOX, and GLBA
Advanced knowledge in security infrastructure design and architecture for both new implementations and existing infrastructure
Experience in designing and implementing enterprise-wide security strategies, policies, and standards
Experience protecting large enterprise environments from internal and external attacks
Strong understanding of network, physical, application, and web security as it relates to vulnerability management
Advanced knowledge of common vulnerabilities, testing approaches, and remediation strategies
Expert understanding of current and emerging security technologies, defense strategies, and industry standards
Ability to determine and recommend security-related products and activities, influencing decision-making processes
Advanced leadership, facilitation, and interpersonal skills to work across functional lines and at various levels
Excellent written and verbal communication skills, with the ability to read, write, and interpret instructional documents
One or more certifications such as CISSP, CEH, Security+, etc
Regularly required to sit, talk, hear; use hands/fingers to touch, handle, and feel
Occasionally required to move about the workplace and reach with hands and arms
Requires close vision
Able to work a flexible schedule based on department and company needs
Benefits
Merchandise discounts
Performance-based incentives
Annual merit review
Employee Assistance Program with mental health counseling and legal/financial advice
Tuition reimbursement
Company
Macy's
Macy's is America’s store for life. The largest retail brand of Macy's, Inc.
H1B Sponsorship
Macy's has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (2)
2024 (1)
2022 (10)
2021 (26)
2020 (37)
Funding
Current Stage
Late StageLeadership Team
Recent News
2026-01-11
2026-01-11
Bizjournals.com Feed (2025-11-12 15:43:17)
2026-01-11
Company data provided by crunchbase