> Markdown version of [/jobs/ext/2536337-sr-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/2536337-sr-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Information Security Engineer

- **Company:** Valvoline Inc.
- **Location:** United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Identity and Access Management, IT Management, Network Security, Network Protocols, Zero Trust Network Access, TCP/IP, Software Vulnerability Management, Google Cloud, Cyber Threat Analysis, Information Technology
- **Published:** August 24, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=30554bf8a40e367a

## About the Role

Demonstrated enterprise influence, ownership of security roadmaps and standards, sound risk-based judgment, and the ability to lead through others are expected indicators of readiness for future Lead responsibilities., * Bachelor's degree in information systems, computer science, engineering, cybersecurity, or a related field, or equivalent combination of education and experience. Advanced degree (nice to have)

 * 8+ years of progressive experience in information technology or information security, including significant experience in security engineering, cloud security, security architecture, security operations, incident response, or related disciplines. Demonstrated experience leading complex, enterprise-impacting initiatives is required.
 * CISSP, CISM, CCSP, GIAC, or equivalent industry certification preferred. Relevant cloud, network, identity, platform, or vendor-specific certifications are also valued.

Competencies Desired

 * Enterprise security engineering: ability to translate cyber risk, business requirements, and threat intelligence into scalable architectures, controls, standards, and roadmaps.
 * Technical authority: advanced knowledge of security platforms, cloud controls, identity and access management, network security, detection and response, vulnerability management, and secure technology integration.
 * Risk-based judgment: ability to assess control effectiveness, prioritize remediation, balance security with operational needs, and make sound decisions under uncertainty.
 * Program and delivery leadership: proven ability to lead complex initiatives across teams, manage dependencies and risks, and deliver measurable outcomes without relying on formal authority.
 * Strategic communication: ability to present clear recommendations, tradeoffs, and risk implications to senior technical leaders, business stakeholders, and governance partners.
 * Operational excellence: ability to establish repeatable engineering practices, metrics, documentation, service expectations, and continuous-improvement mechanisms.
 * Technical mentorship: ability to raise team capability through design reviews, coaching, knowledge sharing, and constructive challenge.
 * Hands-on capability with scripting and automation, security tooling, TCP/IP and network protocols, zero trust principles, and AWS/Azure/GCP security controls.
 * Resilience and accountability: ability to lead through high-pressure incidents, own outcomes, and communicate candidly when risks, constraints, or delivery issues arise.

Working Conditions / Physical Requirements / Travel Requirements

 * Travel up to 10%
 * Remote setting w/travel to the office as needed

## Description

The Senior Information Security Engineer is an advanced technical authority responsible for designing, governing, and continuously improving enterprise cybersecurity capabilities. The role owns complex security engineering outcomes across assigned domains and operates with substantial independence in translating business and cyber risk into practical technical decisions.

This position leads the architecture, implementation, integration, and lifecycle management of security platforms and controls. It establishes engineering standards, evaluates technology options, and provides authoritative recommendations to Information Security, IT, GRC, and business stakeholders.

The Senior Engineer serves as a technical lead for high-impact, cross-functional initiatives and as an escalation point for the most complex security engineering, operational, and incident-related matters. The role influences priorities, improves engineering practices, and mentors other engineers without requiring formal people-management responsibility., * Own the design and technical direction of complex cybersecurity engineering solutions across assigned domains. Define target-state capabilities, reference architectures, engineering standards, and lifecycle plans that align with enterprise security strategy and business risk.

 * Lead cross-functional delivery of major security technology implementations and integrations. Establish technical approach, manage dependencies and risks, direct testing and operational readiness, and ensure solutions are adopted, documented, and transitioned successfully into service.
 * Provide lifecycle and operational ownership for critical cybersecurity platforms and controls. Set configuration and service-quality standards, evaluate performance and coverage, drive continuous improvement, and ensure capabilities remain effective as threats, technologies, and business requirements change.
 * Serve as the final technical escalation point for complex security engineering problems, high-priority incidents, and control deficiencies. Apply expert analysis, coordinate response across teams and vendors, make risk-based recommendations, and communicate status and resolution options to leadership.
 * Lead security reviews and risk assessments for new or materially changed systems, services, and technology solutions. Identify control gaps, recommend proportionate mitigations, and influence architecture and delivery decisions in partnership with GRC, IT, and business owners.
 * Provide technical leadership and mentorship to Information Security Engineering team members. Review designs and deliverables, establish reusable practices, coach engineers through complex work, build the capability required for succession into Lead-level responsibilities, and research emerging threats and technologies to inform the cybersecurity roadmap, investment cases, metrics, and executive communications.
 * Regularly influences Information Security and IT leadership and partners with GRC, enterprise architecture, infrastructure, application teams, business owners, procurement, and third-party providers. The role must explain complex technical and risk topics to both technical and non-technical stakeholders, build alignment across competing priorities, and represent cybersecurity engineering in cross-functional governance and project forums., We are committed to ensuring accessibility throughout our recruitment process. If you require a reasonable accommodation to participate in any stage of the recruitment or selection process, please contact us at:.
*
Email: Valvolineglobalcareers@valvolineglobal.com

This contact information is solely for accommodation requests. For inquiries about application status, please use the appropriate channels listed in your application materials.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)