Information Security Engineer

Ready to be part of something extraordinary? At Cooper’s Hawk, connection is at the heart of everything we do, and we’re looking for passionate people to join us. When you become part of our team, you step into a collaborative, supportive culture built on Uncompromising Hospitality, where standards and genuine care come together to create something truly unforgettable. As we continue our exciting journey, you’ll help us deliver unforgettable experiences to our Wine Club Members and the entire Cooper’s Hawk community.

Join us, and let’s turn moments into lasting memories.

As a member of the Cooper’s Hawk Information Security Team, the Information Security Engineer – Application, Cloud, and Infrastructure Security will be responsible for protecting our enterprise systems and hybrid infrastructure including Azure, Oracle Cloud, Salesforce, and our on-premises environments.

This role focuses on securing systems, applications and services that support our business from the wine club, restaurant, website, mobile apps and the point-of-sale (POS). You’ll help implement security best practices across cloud and on-prem platforms, ensuring data protection, regulatory compliance, and resilience against modern threats.

You’ll collaborate with teams across Applications, Data & Digital and infrastructure & Operations to embed security into the fabric of our technology ecosystem.

• Assist in designing, implementing, and maintaining security controls across Cooper’s Hawk’s hybrid infrastructure, with a strong focus on Microsoft Azure, Oracle Cloud (ERP, Simphony POS), and Salesforce Commerce Cloud, ensuring secure configurations and minimal attack surface.
• Assist in developing and maintaining secure configuration standards for cloud services, with a focus on Azure.
• Engineer and manage security tooling across cloud and on-prem environments, including Microsoft Defender for Endpoint, Defender for Identity, Cisco VPN, Meraki firewalls, and Cloudflare WAF.
• Integrate security into the SDLC by embedding SAST, DAST, and SCA tools into Git Hub and CI/CD pipelines, promoting secure coding through threat modeling and code reviews. Strengthen APIs and customer-facing applications, including those on Salesforce Commerce Cloud, using best practices.
• Administer and fine-tune Cloudflare WAF policies, bot mitigation, and access rules to protect against OWASP Top 10 threats, credential stuffing, and scraping attempts.
• Support identity and access controls across Azure Entra  on-prem Active Directory, including Conditional Access Policies, Role-Based Access Control (RBAC), Just-In-Time (JIT) access, and MFA enforcement.
• Monitor and respond to security threats by tuning detections, supporting investigations, and coordinating incident containment and recovery in collaboration with MDR and SOC teams.
• Perform and support regular vulnerability assessments and penetration testing, ensuring remediation is prioritized based on risk and tracked to closure.
• Assist in security projects, including PCI-DSS audits, NIST CSF 2.0 alignment and cloud security posture improvements.
• Continuously research emerging threats, CVEs, and TTPs, maintaining defenses and detection rules accordingly to stay ahead of the threat landscape.

• Bachelor’s degree in information security, Computer Science, or a related field – or equivalent practical experience.
• 3+ years of progressive experience in infrastructure and application security within hybrid (on-prem and cloud) environments.
• Technical expertise with Windows Server and Desktop platforms, including Active Directory and Entra ; solid understanding of core networking concepts such as DNS, TCP/IP, VLANs, and VPNs.
• Experience with enterprise security tools, including EDR, IPS, IAM,…