[Hiring] Senior Cybersecurity Engineer @Driven Brands Inc.

Role Description

We are looking for a Senior Cybersecurity Engineer to protect our people, data, and operations from modern threats, including those enabled by AI (Artificial Intelligence). You will serve as a technical authority on both sides of cybersecurity: defending against active threats, and designing and engineering cybersecurity into every layer of our technology environment. You will partner with IT, Legal, and business leaders to reduce risk across the enterprise.

How you will Own It:

• Threat Defense
  • Lead investigation and containment of phishing, account compromise, and endpoint and network threats, correlating signals across endpoint, identity, email, and network data.
  • Monitor and triage alerts, and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators.
  • Execute rapid response actions, such as disabling accounts, revoking sessions, and blocking indicators, and document root cause and remediation for leadership and auditors.
  • Develop and tune detections and response playbooks based on emerging threats, including AI-enabled attacks, and lessons learned from incidents.
  • Coordinate major incident response across IT, Legal, and external response partners, and strengthen readiness through tabletop exercises and post-incident reviews.
  • Perform forensic evidence collection and support legal holds and eDiscovery in partnership with Legal.
  • Share in an on-call rotation providing escalation coverage.
• Cybersecurity Engineering
  • Architect and engineer cybersecurity solutions across the full technology stack, including endpoints, networks, identity, email and collaboration, cloud, applications, data, AI systems, and infrastructure, from requirements and design through implementation and lifecycle management.
  • Apply secure-by-design principles such as least privilege, defense in depth, zero trust, and segmentation, using threat modeling and architecture reviews, and maintain cybersecurity standards, reference architectures, and hardened baselines that are monitored for drift.
  • Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities.
  • Secure cloud and hybrid infrastructure through configuration standards, posture management, and guardrails that scale across environments.
  • Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk.
  • Validate and release controls through testing, staged rollouts, and change management, operate cybersecurity platforms for resilience, coverage, and telemetry quality, and evaluate and integrate new technologies through proofs of concept.
  • Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and fixing root causes rather than applying one-off patches.
• Risk & Governance
  • Assess AI and software vendors for cybersecurity, data protection, and governance risk, and deliver decision-ready recommendations.
  • Provide technical evidence and input for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation.
  • Manage cybersecurity vendor relationships, including renewals, service retainers, and roadmap input.

Qualifications

• 5–8+ years in cybersecurity engineering, cybersecurity operations, or incident response.
• Bachelor's degree in a related field, or equivalent experience.
• Hands-on experience engineering, securing, and administering enterprise technology (endpoints, networks, identity, cloud, email, and applications) and cybersecurity platforms, along with incident response experience.
• Working knowledge of NIST CSF, CIS, or ISO 27001.
• One or more certifications such as CISSP, CISM, GIAC, or Security+.

Requirements

• Sound judgment under pressure, clear communication with technical and non-technical audiences, discretion with confidential matters, a collaborative approach to influencing without formal authority, and the curiosity to keep pace with emerging technology and threats.

Benefits

• Compensation Range: $91,400.00 - $163,300.00
• Compensation Frequency: Annual
• Supplemental pay types may include commissions or bonus incentives, depending on the role.
• Driven Brands offers a variety of health and wellness benefits including paid time off and holiday pay.
• Get early access to 50% of your earned wages at any time through our myFlexPay program.