[Hiring] Security Engineer @Lands' End

Role Description

The Security Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across cloud, identity, endpoint, email, network, data, and hybrid infrastructure. The engineer converts security requirements and threat scenarios into dependable configurations, detections, automations, investigations, and documented operating procedures.

This role partners with various teams including Infrastructure, Network, Cloud, IAM, Microsoft 365, Application, Service Desk, Legal, Privacy, Audit, and third-party providers. Success requires:

• Disciplined ownership
• Sound judgment
• Technical curiosity
• Clear communication
• Ability to move work from initial intake through validation, implementation, evidence collection, and closure

Qualifications

• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon, Palo Alto Networks firewalls or Panorama, Mimecast, Microsoft Entra ID, Microsoft Purview, and ServiceNow.
• Experience with Azure security engineering, hybrid identity, Microsoft 365 security, email security, cloud posture management, or data protection capabilities.
• Experience building SIEM or SOAR content, custom parsers, automation playbooks, threat-hunting queries, operational dashboards, or detection-as-code practices.
• Experience with vulnerability-management platforms and remediation workflows in a large or complex enterprise.
• Experience in retail, ecommerce, payment environments, customer-data protection, or high-availability digital services.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent practical experience.
• At least 4 years of progressive experience in security engineering, security operations, incident response, cloud security, network security, or a closely related technical discipline.
• Relevant certifications such as SC-200, AZ-500, SC-300, SC-400, PCNSE, Security+, GCIH, GCIA, CISSP, or comparable technical credentials.

Benefits

• Improved visibility and reduced detection latency for high-impact identity, privilege, endpoint, email, cloud, and network threats.
• Secure, supportable, and well-documented configurations for enterprise security platforms and integrations.
• Timely, evidence-based incident triage, investigation, containment coordination, root-cause analysis, and follow-through.
• Consistent security review of technology changes, firewall requests, cloud deployments, identity changes, and production releases.
• Automation that reduces manual effort, improves data quality, and strengthens repeatability without compromising control or auditability.
• Clear technical ownership, current documentation, defensible change records, and measurable operational health.