Security Engineer I

About Express, Inc.

Express, Inc. is a multi-brand fashion retailer whose portfolio includes Express, Bonobos and UpWest. The Company operates an omnichannel platform as well as physical and online stores. Grounded in a belief that style, quality and value should all be found in one place, Express is a brand with a purpose - We Create Confidence. We Inspire Self-Expression. - powered by a styling community. Bonobos is a menswear brand known for exceptional fit and an innovative retail model. UpWest is an apparel, accessories and home goods brand with a purpose to Provide Comfort for People & Planet.

The Company has over 530 Express retail and Express Factory Outlet stores in the United States and Puerto Rico, the Express.com online store and the Express mobile app; over 60 Bonobos Guideshop locations and the Bonobos.com online store; and 13 UpWest retail stores and the UpWest.com online store. Express, Inc. is traded on the NYSE under the symbol EXPR. For more information about our Company, please visit www.express.com/investor and for more information about our brands, please visit www.express.com, www.bonobos.com or www.upwest.com.

The Security Engineer is responsible for working in several different security and governance, risk, and compliance disciplines under direction of the Director of IT Security & Governance. In this role you will be responsible for driving improvement across vulnerability management and support the role of data governance. This position requires knowledge of security concepts, tools and programs (vulnerability management, incident management).

• Performs control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommends remedial action
• Monitor and report on compliance with security policies, as well as the enforcement of policies within the IT department.
• Operate security tools and utilize methodologies to monitor security alerts and report any performance or security concerns
• Test, recommend, or support the implementation of new or updated information security hardware or software; provide technical expertise for the implementation, maintenance, and administration of security tools.
• Develop a strong working relationship with the corporate and brand infrastructure teams to develop and implement controls and configurations aligned with security policies
• Ensures corporate standards are properly communicated to technology units, business partners and customer teams.
• Collaborate in efforts to validate security solutions and ensure strategies are aligned with the business architecture/direction.
• Provides technical support for vulnerability management, patch management, and security baselines.
• Provide escalation and support for troubleshooting and resolution of all security issues as required.
• Support relationships with key Line of Business leaders in order to align performance engineering strategies, deployments and products.

REQUIRED EXPERIENCE & QUALIFICATIONS

• Years of Experience: 1-3 years of technology experience   
• Experience in variety of security technologies
• 1-2 years of experience with security tools installation, maintenance, and administration
• 1-2 years of experience with vulnerability and patch management
• 1-2 years of exposure to network infrastructure, including routers, switches, firewalls and associated network protocols and concepts highly desired
• Knowledge and experience installing, analyzing, and troubleshooting security tools
• Knowledge of risk assessment methods and technologies
• Technical working knowledge of mainstream operating systems (i.e.: Windows, Linux, MacOS, etc.)
• Experience in developing, documenting and maintaining security policies, processes, procedures and standards
• Experience in system technology security testing (vulnerability scanning and penetration testing)
• Required to participate in a rotating 24x7 on-call technical support

CRITICAL SKILLS & ATTRIBUTES

• Demonstrate effective decision-making, problem solving, analytical and communication skills.
• Ability to work independently and effective at building partnerships to facilitate the accomplishment of goals
• Strong organizational/time-management, organizational, technical and communication skills
• Effective at planning and leading meetings to accomplish stated goals and objectives
• The ability to work effectively with business managers, IT engineering and IT operations staff
• Strong collaborative and communication skills including working with internal cross-discipline teams, vendor engineering resources, and client technical leads
• Familiarity with organizational policies, business requirements for information security and the regulations related to information security.
• General knowledge and experience of business processes, practices, and organizational structures

An equal opportunity employer, Express, Inc. does not discriminate in recruiting, hiring or any other terms and conditions of employment hiring on the basis of any federal, state, or locally protected characteristic. Express, Inc. only hires individuals authorized for employment in the United States. Express, Inc. is committed to providing reasonable accommodation to individuals with disabilities. If you need an accommodation because of a disability to search and apply for a listed job position, please call 1-800-964-9793 and say 'Associate Relations' or send an e-mail to AssociateRelations@Express.com and let us know the nature of your request and your contact information.

Notification to Agencies: Please note that Express, Inc. does not accept unsolicited resumes or calls from third-party recruiters or employment agencies. In the absence of a signed Master Service Agreement and approval from HR to submit resumes for a specific requisition, Express, Inc. will not consider or approve payment to any third-parties for hires made.