Senior Engineer, IT Security Engineering

Chipotle Mexican Grill

. Evangelize IT and AI security fundamentals, tools, processes, and act as a consultative partner with IT and Business teams.

Posted 9/17/2026full-timeNewport Beach • California • United StatesSenior💰 $116,000 - $162,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security management, including the development and integration of AI-enabled security workflows, compliance with the NIST Framework, and effective risk assessment strategies. Proficient in security engineering concepts across various domains, with strong capabilities in automation and vulnerability management.

Highest-signal resume keywords

IT Security ManagementNIST Framework ComplianceAutomation and Integration EngineeringVulnerability ManagementSecurity Risk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk FrameworksEvent Analysis and InvestigationSecurity Testing ToolsSecurity Solution DesignCloud Security PrinciplesSecurity Event InvestigationAutomation TechnologiesSecurity Policy AdherenceVulnerability TestingAI-Enabled Security Workflows

Soft Skills

Strong Communication SkillsRelationship BuildingTechnical Writing

Tools & Technologies

Security Operations ToolsEvent Logging PlatformsOrchestration ToolsAI TechnologiesSecurity Assessment Tools

Certifications & Qualifications

CISSPCCSPCCSKTAISE

Industry Keywords

IT SecurityGovernance Risk and ComplianceSecurity PoliciesSecurity Best PracticesSecurity Vulnerabilities

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Evangelize IT and AI security fundamentals, tools, processes, and act as a consultative partner with IT and Business teams.
Develop, integrate, and improve automated, AI-enabled, and agentic security workflows that enrich, investigate, prioritize, and respond to security events.
Perform IT security assessments and remediation activities and ensure teams adhere to the NIST Framework.
Manage a suite of IT security tools supporting security policies.
Own technical relationships with solution providers and work with Governance, Risk, and Compliance on external and internal risk assessments.
Provide SME-level security guidance across departments and projects with security impact.
Guide and perform vulnerability testing and analysis, new solution and feature design and implementation, and security event investigations.
Ensure applications and environments comply with security policies and security best practices.
Improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies.
Evaluate current and emerging security technologies and provide recommendations based on effectiveness, operational value, risk reduction, and business requirements.
Participate in security incident response and daily Security Operations tasks.
Participate in documentation and adherence to Security Policies and Operating Procedures.
Develop and mature the IT security program through interaction with Security and GRC Leadership.
Remain current with Information Security best practices.

Requirements

What you’ll need

BS in related field, or equivalent experience and training preferred.
5-8 years of experience leading security initiatives, projects, or cross-functional workstreams preferred.
Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.).
Ability to perform event analysis and investigation.
Strong automation and integration engineering skillset.
Comprehensive understanding of Security Risk Frameworks.
Ability to configure and manage core technologies.
Strong understanding of security engineering concepts across infrastructure, identity, endpoint, network, cloud, application, data protection, vulnerability management, detection, and response.
Experience with event logging, parsing, orchestration, and alert enrichment across security platforms.
Understanding of proper maintenance of security solutions.
Strong communication and relationship building skills.
Experience in technical writing, and ability to present information at the executive level.
Skilled at performing IT security focused application/environment design reviews.
Experience using common security testing tools and techniques to assess applications, infrastructure, cloud environments, and enterprise platforms, with the ability to identify risk and recommend practical remediation.
Understanding of how generative AI, AI agents, and autonomous technologies can be applied to cybersecurity use cases.
Experience using automation, orchestration, or AI-enabled technologies to improve security operations or engineering processes.
Deeply knowledgeable about security vulnerabilities with the ability to identify them, assess risk, and provide remediation guidance.
Knowledgeable regarding incorporating security requirements into a SDLC.
Working knowledge of cloud security principles, including identity, network segmentation, logging, vulnerability exposure, workload protection, SaaS security, and secure configuration management.
Design and implementation experience in Security solutions.

Benefits

Comp & perks

Annual cash bonuses based upon performance and other factors
Equity awards based upon performance and other factors
Medical insurance
Dental insurance
Vision insurance
401k
Sick leave
Vacation time
Reasonable accommodations for qualified applicants with disabilities