Staff Security Engineer - Cyber Security

Be part of an amazing story

Macy’s is more than just a store. We’re a story. One that’s captured the hearts and minds of America for more than 160 years. A story about innovations and traditions…about inspiring stores and irresistible products…about the excitement of the Macy’s 4th of July Fireworks, and the wonder of the Thanksgiving Day Parade. We’ve been part of memorable moments and milestones for countless customers and colleagues. Those stories are part of what makes this such a special place to work.

Job Overview

Macy’s is seeking a Staff Information Security Engineer to join its Cloud Security team. This position plays a pivotal role in designing, implementing, and operating secure solutions across the enterprise. As a recognized technical leader, the engineer will provide guidance on information security concepts, ensuring that Macy’s systems and processes align with business objectives while maintaining a strong security posture.

The role involves leading security planning, assessment, testing, and implementation activities, as well as documenting standards, policies, and procedures. The engineer will mentor team members, coordinate resources, and define configuration and operational requirements for security projects. Collaboration with Infrastructure, divisional, and Domain management is central, as is providing technical leadership to Platform & Development teams.

The ideal candidate is curious, creative, and tenacious, with a passion for cloud security and continuous learning. They will drive improvements in visibility, manageability, and resilience of Macy’s GCP and Azure platforms, while sharing knowledge and fostering growth across the team. This is an opportunity to make a meaningful impact on Macy’s security landscape and contribute to the future of secure, innovative cloud solutions.

What You Will Do

• Partner with Development and Platform teams to assess needs, identify security gaps, and translate requirements into secure specifications.
• Define security architectures, standards, and compliance requirements; conduct vulnerability analyses and risk assessments; and implement preventive, detective, and reactive measures.
• Lead security initiatives and project teams by managing scope, objectives, deliverables, and stakeholder expectations, ensuring successful execution.
• Drive a “security as code” approach by building and maintaining Terraform Policy as Code modules, developing self service workflows, and embedding security earlier in the development lifecycle (“shift left”).
• Continuously improve the security posture baseline by defining metrics, conducting assessments, and creating response plans.
• Mentor and coach Security Analysts, providing guidance and expertise to support their professional growth.
• Collaborate closely with managed service providers, vulnerability management, and incident response teams to strengthen operational resilience.
• Provide expert level support for complex security issues and ensure consistent, accurate documentation of standards, configurations, and procedures.
• Participate in on call and change rotations to support ongoing operations.
• Demonstrate regular, dependable attendance and punctuality to ensure consistent delivery. 
• In addition to the essential duties mentioned above, other duties may be assigned.

Skills You Will Need

Security Architecture & Technical Expertise: Deep knowledge of enterprise security architectures, technologies, protocols, and configurations; ability to assess system vulnerabilities, design secure solutions, and guide implementation aligned with business needs.

Risk Assessment & Analytical Thinking: Proficient in evaluating risks, conducting vulnerability analyses, interpreting complex technical data, and generating clear, actionable risk statements to strengthen the company’s security posture.

Project Leadership & Execution: Strong ability to lead complex security initiatives, define scope and deliverables, coordinate resources, manage timelines, drive stakeholder alignment, and ensure successful project completion.

Cross-Functional Communication & Influence: Excellent written and verbal communication skills, with the ability to articulate technical concepts to non-technical audiences, influence decision-making, and represent leadership in meetings, briefings, and executive updates.