Lead Engineer, Information Security

Innovate in Charlotte

Thank you for dedicating your time and talent to Lowe’s.  We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!

Job Summary

The primary purpose of this role is to provide consultation and technical direction to engineers focused on the design, implementation, and ongoing operation of network security technologies and services. This includes enterprise firewalls, IoT security platforms, microsegmentation solutions, and associated network security tooling. The role is responsible for translating business requirements and functional specifications into scalable, resilient network security architectures that protect enterprise assets with appropriate levels of control and segmentation.

To be successful, the individual in this role must have advanced knowledge of network security principles, including firewall policy management, zero trust network segmentation, and IoT device security. This role serves as a technical expert for project teams that establish and maintain secure network environments that enable the business to operate efficiently while meeting regulatory and industry security standards.

Key Responsibilities

• Drives the strategic design, implementation, and optimization of enterprise network security platforms, including firewalls, microsegmentation technologies, and IoT security solutions

• Serves as a technical expert for project teams implementing and maintaining network security controls; defines and oversees documentation of standards such as firewall rule governance, segmentation policies, and network access controls

• Leads the design and enforcement of network segmentation strategies, including zero trust architectures and microsegmentation frameworks across data center, cloud, and IoT environments

• Engineers and maintains firewall policies, rule lifecycle management processes, and traffic inspection capabilities to ensure secure and efficient network operations

• Resolves complex network security issues spanning multiple environments, including on-premises, cloud, and hybrid infrastructures

• Identifies, reports, and leads response activities for network-related security incidents, including traffic analysis, intrusion detection, and containment strategies

• Mentors and advises engineers on network security engineering practices, tools, and operational processes

• Analyzes outputs from network security tools such as firewalls, IDS/IPS, network detection and response (NDR), and microsegmentation platforms to identify risks and drive remediation

• Evaluates network architectures and traffic flows to identify vulnerabilities and enforce segmentation and access control improvements

• Develops and enhances automation and scripting for firewall policy management, segmentation enforcement, and network security monitoring

Required Qualifications

• Bachelor’s degree Computer Science, CIS, Engineering, Cybersecurity, or related field or equivalent years of experience in lieu of education requirement, if applicable

• 7 years Experience in technology system support, software development or a related field

• 5 years Experience with information security applications and systems

• 4 years Experience evaluating complex application and hosting environments to identify potential weaknesses and provide remediation plans to reduce risk

• 5 years Experiencing designing complex application and infrastructure systems

Preferred Qualifications

• Master’s degree Computer Science, CIS, Business Administration or related field

• 6 years Experience working on project(s) involving the implementation of solutions applying development life cycles (SDLC)

• 4 years Experience designing application pipelines with secure configuration parameters to remove or reduce known threat vectors

• 5 years Experience working with diverse application and infrastructure environments to identify and provide technical guidance on threat reduction at both the application and supporting infrastructure layer

• 6 years IT experience developing and implementing business systems within an organization

• PCI ISA

• CRISC

• OSCP

• GPen

Benefits

• 401k with up to 4.25% match

• Bi-annual Cash Bonus

• Discounted Employee Stock Purchase Plan (15% discount of strike price)

• Tuition-Free Education

• 10-week Maternity/Parental Leave

• 10% Associate Discount

• For inf