Staff, Security Engineer

At Macy's, Inc. we're on a mission to create a brighter future with bold representation for all. This is our Mission Every One. We know that each person here is unique. So we respect and invest in each individual to create growth, pride, and satisfaction. If we are able to bring our whole selves to work, it translates into a more abundant and wider array of ideas and energy for all to benefit from. Our success will be built on amazing colleagues, working together.

Job Overview

The Staff, Vulnerability Engineer is a specialist in Penetration Testing and Information Security Vulnerability Management. This hands-on role involves conducting penetration tests and vulnerability assessments on complex applications, operating systems, and wired and wireless networks. In response to an ever-changing threat landscape, they establish a proactive program to assess Macy’s resilience against real-world tactics, techniques, and procedures (TTPs).

What You Will Do

• Establish a risk-based approach for evaluating and prioritizing new and emerging threats.
• Stay current on emerging technology trends and the threat landscape, providing subject matter knowledge on specific adversarial threats and risks to assist with mitigation strategies.
• Design, coordinate, and lead simulations based on organizationally defined threat scenarios.
• Participate in reviewing and developing security strategies, best practices, policies, and procedures.
• Provide leadership, share knowledge, and mentor team members.
• Build working relationships with Macy’s TMRC, leadership, and third parties to identify top threats.
• Develop standard Rules of Engagement for real-time testing.
• Document detailed findings, analysis, and recommendations.

AI & Machine Learning: Expertise in Generative AI, LLMs, RAG, AI Agents, Prompt Engineering, LangChain/LangGraph, anomaly detection, NLP, transformers, and security-focused ML solutions.

Security Engineering: Strong experience in detection engineering, threat hunting, SIEM/XDR/EDR, MITRE ATT&CK, Sigma, OCSF, threat intelligence, and enterprise security operations.

Cloud & Infrastructure: Advanced knowledge of AWS, Azure, GCP, Databricks, Kubernetes, Docker, CI/CD, and scalable cloud-native security architectures.

Software Development: Strong programming skills in Python, SQL, JavaScript, C/C++, API development, automation, and distributed systems engineering.

Threat Protection: Experience protecting large enterprise environments through advanced analytics, behavioral detection, adversary simulation, and AI-powered security automation.

Research & Innovation: Proven track record of cybersecurity research, patents, publications, and development of innovative security technologies.

Leadership & Collaboration: Ability to lead cross-functional initiatives, influence architecture decisions, mentor engineers, and partner effectively across security and engineering organizations.

Communication: Excellent written, verbal, and presentation skills, with experience communicating technical concepts to executive and technical audiences.

Education/Certifications: PhD or Master's degree in a technical discipline preferred; AI, Cloud, or Cybersecurity certifications are a plus.

Experience: 10+ years of experience in software engineering, cybersecurity, AI/ML, or related fields with production-scale deployments.

Who You Are

• This role involves performing essential job functions such as communication, collaboration, and use of office and computer systems. Responsibilities include the ability to access and review written and electronic information, and to move within the work environment and interact with workplace materials as needed to carry out job responsibilities.

• An inclusive, challenging, and refreshingly fun work environment
• Competitive pay and benefits rooted in principles of equity
• Performance incentives and annual merit review
• Merchandise discounts
• Health and Wellness Benefits across medical, dental, vision, and additional insurance
• Retirement Savings Plan with 401k match opportunity
• Employee Assistance Program (mental health counseling and legal/financial advice)
• Resources for continuous learning, career growth, and leadership development
• 8 paid holidays
• Paid Time Off (first year prorated depending on start date)
• Tuition reimbursement program
• Colleague Resource Groups (CRGs) and give-back/volunteer opportunities
• Empowerment and autonomy to perform impactful work with tangible results

Now is an exciting time for a Macy's career as we continue to focus on creating exciting and memorable experiences for every Macy's customer, whether their journey starts online or in the store. Our opportunities in Sales, Merchandise, Operations, Customer Service, Warehouse, Marketing, and other areas let you express your creativity and commitment to excellence, grow your career and make a difference to your Macy's colleagues and customers.

Bring your creativity, energy, and ideas to the Macy's team – Apply Today!

This job description is not all inclusive; additionally, Macy’s, Inc. reserves the right to amend this job description at any time. Macy’s, Inc. – including Macy’s, Bloomingdale’s, and Bluemercury – is an equal opportunity employer, committed to a diverse and inclusive work environment.

LEGALRE00

This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Additional benefit details are available at macysJOBS.com.