Overview:
It All Starts with Our People
As the leader in automotive preventive maintenance, Valvoline has a proven track record of growth. We continue to invest in our people, processes, and technology to strengthen our ability to efficiently deliver Quick, Easy, Trusted service across all our stores – every day. We're not just in the car business; we're in the people business. And we're looking for humble, hungry, and smart people to help us shape the future of mobility. If you're hungry to drive change and seek a dynamic, collaborative environment that fuels both personal and professional growth, you've found your place with us.
Our highest priority is creating a welcoming workplace with team members from a wide variety of diverse backgrounds and experiences.
The Opportunity
Valvoline has a rewarding opportunity as an Information Senior Security Engineer. In this role, you will be responsible for the consultation, development, implementation, and support of processes and technologies that enable the secure configuration and deployment of Windows, Linux, and MacOS operating systems within Valvoline. The individual in this position interacts closely with our Infrastructure teams, along with product vendors and IT service management, to identify security requirements, pinpoint material weaknesses in our current configurations, and develop security baselines that improve security capabilities and reduce Valvoline’s risk posture. In addition, the Information Security Engineer will assess opportunities for improving Valvoline's operating system logging capabilities and control effectiveness, including new security features.
How You'll Make a Difference
Operating System Security – Help develop a secure configuration program with the end goal of hardening our Windows, Linux, and macOS deployments. Use standard benchmarks to create a phased plan and measure our compliance and any risk from incorrect configurations. Document applicable controls and configurations to establish a baseline. Assist in assessing the risk for any exceptions to our standard secure configuration baseline.
Projects - Perform installation and configuration management of internally managed security systems and platforms. For externally hosted solutions, partner with the vendors to provide integration services.
Logging and SIEM Integration – Prioritize logging sources that are needed for information security and work with the appropriate teams to have them sent to the SIEM. Assist with the development of alerts, reports, and dashboards in the SIEM. Provide subject matter expertise regarding logging best practices and the SIEM.
Engineering Support – Assist colleagues within the team to provide administrative backup and cross-training. Perform periodic health checks to ensure information security systems are functioning as expected.
Knowledge Transfer - Assist and train other Information Security colleagues in the use of new security tools, emerging technologies, best practices, and the resolution of common security engineering issues. Provide mentoring for more junior colleagues interested in engineering.
Vendor Relations - Maintain working relationships with information security vendors and Valvoline IT teams to maintain awareness of emerging tools and technologies to ensure optimal deployment of Information Security capabilities utilizing best practices.
Other duties and responsibilities as determined by Valvoline from time to time at its sole discretion.
What You'll Need to Succeed
- Bachelor's degree in information systems, engineering, management, or a related field, or a minimum of four years of equivalent work experience
- Minimum of four years of experience with Windows Server, Workstation, and Linux operating systems is required
- Minimum of two years of experience implementing and maturing operating system security is required
- Minimum of two years of experience working with an SIEM, including creating and maintaining alerts, reports, and dashboards
- Experience with Application Allowlisting, file integrity monitoring, and benchmark scanning applications is preferred
- Familiarity with implementing CIS Benchmarks or other hardening standards is preferred
- CISSP, CCSP, or CEH are preferred
- Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, data protection, and identity and access management
- Practical experience working with security-related frameworks such as NIST CSF, NIST 800-53, or COBIT
- Experience in developing, documenting, and maintaining security procedures
- Strong analytical and problem-solving skills to provide multiple options for risk mitigation and problem resolution
- Ability to work well under minimal supervision
- Continuous self-learning of emerging security technologies, control frameworks, and best practices.
- Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT business personnel
- Strong written and verbal communication skills
- Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience, and build long-term relationships
- Must be authorized to work in the U.S.
We Take Care of the WHOLE You
- Health insurance plans (medical, dental, vision)
- HSA and flexible spending accounts
- 401(k)
- Incentive opportunity*
- Life insurance
- Short and long-term disability insurance
- Paid vacation and holidays*
- Employee Assistance Program
- Valvoline Instant Oil Change discounts
- Tuition reimbursement*
- Adoption assistance*
*Terms and conditions apply, and benefits may differ depending on position.
Your Path to Valvoline
Valvoline provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Join us in revolutionizing the automotive aftermarket industry while enjoying competitive benefits, a supportive work culture, and opportunities for advancement. Apply now and become an integral part of our journey at Valvoline.
The Company endeavors to make its recruitment process accessible to any and all users. Reasonable accommodations will be provided upon request to applicants with disabilities to facilitate equal opportunity throughout the recruitment and selection process. Please contact Human Resources at 1.833.VVV.Report or email ECC@valvoline.com to make a request for reasonable accommodation during any aspect of the recruitment and selection process. The contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.
