Sr Engineer, Information Security

Innovate in Charlotte

Thank you for dedicating your time and talent to Lowe’s.  We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!

Your Impact

The primary purpose of this role is to support the design, implementation, and ongoing operation of information security tools and services. This includes leading the process of translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to design and implement remediation solutions.
To be successful, the individual in this role must have strong knowledge of security practices and tools related to identity and access management, along with enterprise digital certificate management systems. This role establishes and maintains programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices.

What You Will Do

• Lead the design, construction, and enhancement of advanced cybersecurity platforms, leveraging expert-level scripting methodologies and custom code development to ensure superior security infrastructure and resilience.

• Lead the implementation and maintenance of assigned information security solutions to ensure successful deployment and operation; develops and documents detailed standards (e.g., guidelines, processes, procedures)

• Assist the Information Security team in monitoring security systems, reviewing logs, and managing information security systems.

• Collaborate with other technology teams, including Engineering, to design and implement remediation solutions.

• Identifies reports and provides assistance during information security incidents as part of an Incident Response Team; reviews and responds to security alerts to investigate malicious activity.

• Support evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends

• Keep up to date with exploits relevant to the retail sales environment.

• Solve complex architecture/design and business problems; solutions are extensible; works to simplify, optimize, remove bottlenecks, etc.

• Provide mentoring and guidance to more junior-level engineers; may provide feedback and direction on specific engineering tasks.

• Respond to escalated security issues for enterprise systems; facilitates advanced diagnosis and troubleshooting when necessary.

• Provide input into security breach response procedures; helps lead security breach response activities.

• Lead break/fix activities, escalating problems to senior management and/or vendors as appropriate.

• Analyze the output of industry-standard cybersecurity tools and identify remediations to reduce risk and exposure of applications.

• Complete custom enhancements of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities

• Evaluate entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities.

• Design, build, and enhance automated security services and internal platforms, using advanced scripting and software engineering practices to improve the accuracy, efficiency, and scalability of security capabilities across the enterprise.

• Lead implementation and ongoing maintenance of DevSecOps-driven security solutions, ensuring they are well-documented, reliable, and aligned with enterprise standards, guidelines, and operational practices.

• Develop API integrations, data pipelines, and automated workflows that collect, normalize, and present security data to partner teams, enabling measurable and actionable security insights.

• Collaborate closely with security and engineering teams to translate requirements into practical, automated solutions—often supporting teams without development expertise by engineering tools and processes on their behalf.

• Maintain and enhance internal applications, including an Express.js–based platform, ensuring secure coding practices, high availability, and effective data handling.

• Support incident response activities by providing engineering expertise, tool automation, and data enrichment that improve investigation and remediation accuracy.

• Evaluate emerging security technologies, automation tools, and engineering approaches to address current and future security needs; participates in technical proofs of concept and adoption planni