Systems/Application Security Analyst, Sr. jobs in Charlotte, NC

The primary purpose of this role is to support the design, implementation, and ongoing operation of information security tools and services. This includes leading the process of translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to design and implement remediation solutions.

To be successful, the individual in this role must have strong knowledge of security practices and tools related to identity and access management along with enterprise digital certificate management systems. This role establishes and maintains programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices."

Key Responsibilities:

• Leads the implementation and maintenance of assigned information security solutions to ensure successful deployment and operation; develops and documents detailed standards (e.g., guidelines, processes, procedures)
• Hands-on management and configuration of physical and cloud firewalls (Palo Alto, Fortinet)
• Cloud security design and engineering for firewalls in multiple environments (GCP, Azure, OCI)
• Palo Alto remote access management for both networks and users with Prisma and GlobalProtect.
• Good knowledge of Firewall, Network, IT Compliance, and Project Management.
• Ability to communicate and add value to IT Infrastructure, Security, Network Architectural Design, IT Security & Compliance
• Strong knowledge of firewall and network infrastructure and topology
• Strong knowledge of firewalls, web proxy, VPN, Network Access Control
• Experience with upgrading/installing firewalls and network devices.
• Assists the Information Security team in monitoring security systems, reviewing logs, and managing information security systems.
• Collaborates with other technology teams including Engineering to design and implement remediation solutions.
• Supports evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends.
• Keeps up to date with exploits relevant to the retail sales environment.
• Solves complex architecture/design and business problems; solutions are extensible; works to simplify, optimize, remove bottlenecks, etc.
• Provides mentoring and guidance to more junior-level engineers; may provide feedback and direction on specific engineering tasks.
• Responds to escalated security issues for enterprise systems; facilitates advanced diagnosis and troubleshooting when necessary.
• Participates in the implementation of hardware and software changes into environments to ensure security requirements are met.
• Leads break/fix activities, escalating problems to senior management and/or vendors as appropriate.
• Maintain updated documentation and provide support and turnover to Security Operations teams.
• Familiar with automation and scripting tools (Python, Ansible, etc.).

Required Qualifications:

• Bachelor's Degree in Computer Science, CIS, Engineering, Cybersecurity, or related field (or equivalent work experience in a related field).
• 5 Years of experience in technology system support, software development, or a related field
• 2 Years of experience with information security applications and systems.

Preferred Qualifications:

• Master's Degree in Computer Science, CIS, Business Administration, or related field.
• 4 Years experience working on project(s) involving the implementation of solutions applying development life cycles (SDLC).
• 1 Year of DevOps experience.
• 3 Years of experience evaluating entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities.
• 3 Years of experience in the custom enhancement or development of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities.
• Relevant information security certifications (e.g., CISSP, CISM, CEH, PCI ISA, CRISC, CISA, OSCP, GPen).
• Advanced understanding of information security practices and policies.
• 5 Years of IT experience developing and implementing business systems within an organization.
• 5 Years of experience working with defect or incident tracking software.
• 5 Years of experience writing technical documentation in a software development environment.
• 3 Years of experience working with an IT Infrastructure Library (ITIL) framework.
• 3 Years of experience leading teams, with or without direct reports.
• 5 Years experience working with source code control systems.
• Experience working with Continuous Integration/ Continuous Deployment tools.
• 5 Years of experience in systems analysis, including defining technical requirements and performing high-level design for complex solutions.
• Experience with Cloud technologies.

About Lowe’s 

Lowe's Companies, Inc. (NYSE: LOW) is a FORTUNE® 50 home improvement company serving approximately 17 million customer transactions a week in the U.S. With total fiscal year 2022 sales of over $97 billion, approximately $92 billion of sales were generated in the U.S., where Lowe's operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe's supports the communities it serves through programs focused on creating safe, affordable housing and helping to develop the next generation of skilled trade experts. For more information, visit Lowes.com.

Lowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.