Sr. Analyst, Automation Engineer

Restaurant Brands International Inc. (RBI) is one of the world’s largest quick‑service restaurant companies, with nearly $45billion in annual sales and more than 32,000 restaurants across 120+ countries. RBI owns four iconic brands—TIM HORTONS®, BURGER KING®, POPEYES®, and FIREHOUSE SUBS®—and is committed to improving sustainable outcomes in food, planet, and people through its Restaurant Brands for Good framework.

• Lead security automation strategy, standards, and implementation across cloud, Dev Sec Ops , and GRC engineering domains.
• Design and implement automated controls, continuous monitoring, and evidence collection aligned with NIST, PCI, and SOX requirements.
• Build and enhance secure CI/CD pipelines using Git Hub and Circle
  
  CI for traditional and AI‑enabled developer communities.
• Implement Infrastructure as Code with Terraform and configuration management with Ansible to improve consistency, security, and scale.
• Develop automation to improve operational security, detection, and response efficiency using platforms such as Crowd Strike, Crowd Strike SIEM, Git Hub Advanced Security, Qualys, and Netskope.
• Design and implement container and Kubernetes (EKS) security controls, including image scanning and runtime protection.
• Integrate application security testing (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.
• Develop automation for secrets management and least‑privilege identity enforcement.
• Enhance observability and security telemetry pipelines to improve detection and response.
• Support incident response automation, playbooks, and post‑incident analysis.
• Apply threat modeling and risk‑based design principles to security automation solutions.
• Integrate security findings, policy checks, code scanning, vulnerability data, and cloud controls into orchestrated engineering workflows.
• Leverage AI‑assisted development, intelligent automation, and developer guardrails to improve engineering speed and security outcomes.
• Partner with Infrastructure, Cloud, Cybersecurity, and Application teams to establish reusable automation patterns and self‑service capabilities.

• 3+ years of experience in Dev Sec Ops , Security Engineering, or a related field.
• Strong Python skills and hands‑on experience with Git Hub, CI/CD pipelines, and automation.
• Experience working in AWS environments, using Terraform, and building secure‑by‑design infrastructure and application pipelines.
• A track record of automating security, compliance, or operational processes to improve efficiency and reduce risk.
• Familiarity with containerization and orchestration tools like Docker and Kubernetes (EKS is a plus).
• Experience implementing application security practices (SAST, DAST, SCA) and integrating them into the development lifecycle.
• Solid understanding of identity, secrets management, and modern security best practices.
• Exposure to observability, logging, and security telemetry.
• Experience with threat modeling or risk‑based security design.
• Working knowledge of security and compliance frameworks (NIST, PCI, SOX, or similar).
• Ability to collaborate across teams and influence technical decisions.
• Experience securing APIs and microservices architectures.
• Nice to have:
  Industry certifications like AWS Security Specialty, CISSP, CISM, or CKS.
• Experience with tools such as Ansible, policy‑as‑code frameworks, or SOAR platforms.
• Familiarity with security tools such as Git Hub Advanced Security, Crowd Strike, Qualys, Netskope, or similar.
• Interest or experience in applying AI/ML or GenAI to security, automation, or engineering productivity.
• Background in fast‑paced, distributed environments like QSR, retail, or franchise organizations.

RBI offers comprehensive global benefits focused on physical, mental, and financial wellness. Benefits include a global paid parental leave program, free telemedicine and mental wellness support, and many additional wellness and financial plans.

Restaurant Brands International and all of its affiliated companies are equal‑opportunity employers that do not discriminate on the basis of race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, veteran status, or any other characteristic protected by law. Accommodation is available for applicants with disabilities upon request.