Senior Engineer, IT Security Engineering

CULTIVATE A BETTER WORLDFood served fast does not have to be a typical fast-food experience. Chipotle has always done things differently, both in and out of our restaurants. We are changing the face of fast food, starting conversations, and directly supporting efforts to shift the future of farming and food. We hope you will join us as we continue to learn, evolve, and shape what comes next on our mission to make better food accessible to everyone.

THE OPPORTUNITY As the Senior Engineer, IT Security Engineering, under minimal supervision, you will participate in the efforts to implement and mature security capabilities that protect the company's technology environment. You will partner with technology and business organizations to address complex security challenges and improve the effectiveness of security controls. This role will also help advance the use of artificial intelligence, automation, and autonomous security technologies within Security Engineering.

You will identify opportunities to apply these capabilities to improve security operations, detection, investigation, vulnerability management, threat intelligence, adversarial testing, and other security engineering functions.

LOCATION This position will be based in our Newport Beach, CA or Columbus, OH office 4 days per week (with work from home on Friday). Remote work is not available for this role.

WHAT YOU’LL DOEvangelize IT and AI security fundamentals, tools, processes, and acts as a consultative partner with IT and Business teams. Develop, and integrate, and improve automated, AI-enabled, and agentic security workflows that enrich, investigate, prioritize, and respond to security events using data and capabilities from enterprise security platforms.

Perform IT security assessments and remediation activities as part of the IT security organization and ensure CMG teams adhere to the NIST Framework. Manage a suite of IT security tools providing controls that support our security policies. Technical ownership with current or future solution providers and work closely with the Governance Risk and Compliance team to provide analysis of external, and internal risk assessments.
Work cross functionally with all departments to provide SME level security guidance on all projects which have security impact to CMG. Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events. Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices.

Identify and implement opportunities to improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies.

Evaluate current and emerging security technologies, including AI-enabled and autonomous security capabilities, and provide recommendations based on technical effectiveness, operational value, risk reduction, and business requirements.

Participate as a key member in security incident response activities as well as daily Security Operational tasks. Participate in documentation and adherence to Security Policies and Operating Procedures. Develop and mature IT security program through interaction with Security and GRC Leadership. Remain current with Information Security best practices.

WHAT YOU’LL BRING TO THE TABLEBS in related field, or equivalent experience and training preferred.
5-8 years of experience leading security initiatives, projects, or cross-functional work streams preferred.

Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.). Ability to perform event analysis and investigation. Strong automation…