Senior, Security Engineer - Security Automation

Senior, Security Engineer - Security Automation

Johns Creek, GA, United States

• Full time Schedule
• $91,400 - $152,500 Annually*
• * based on job, location, and schedule

Be part of an amazing story.

Macy’s is more than just a store. We’re a story. One that’s captured the hearts and minds of America for more than 160 years. A story about innovations and traditions…about inspiring stores and irresistible products…about the excitement of the Macy’s 4th of July Fireworks, and the wonder of the Thanksgiving Day Parade. We’ve been part of memorable moments and milestones for countless customers and colleagues.

Those stories are part of what makes this such a special place to work.

Job Overview

The Senior, Security Engineer reviews and develops security solutions using strong software development skills and actively engages with management to provide timely updates and clear status. This role informs decision-making related to security risk exposure and operational stability through effective communication and technical insight.

What You Will Do

• Translate business requirements into well-engineered, tested, and deployed application systems; provide ongoing production support.
• Partner with internal customers to identify efficient, cost-effective solutions and lead the design, development, testing, installation, and deployment of software applications.
• Develop solutions using a range of software technologies, including new code development, enhancements to existing modules, configuration, and package implementation.
• Contribute to the development of new systems and applications for moderate to small projects with higher technical complexity, working from functional specifications.
• Perform coding and configuration in accordance with documented requirements, using standard procedures and best practices.
• Monitor the performance and operational efficiency of existing applications and provide or coordinate proactive maintenance.
• Review, analyze, and modify application systems, including coding, testing, debugging, and deployment for large-scale environments.
• Maintain accurate documentation of program development, changes, and revisions.
• Provide technical support and lead effective problem resolution for customer inquiries and production issues.
• Collaborate with technical leads across network, server, application, field services, project management, data center operations, and subject matter experts to integrate security controls into a cohesive, risk-mitigating architecture.
• Apply strong critical-thinking skills to assess issues, evaluate options, and drive sound technical decisions.
• Mentor and coach Security Analysts, providing guidance and expertise to support their professional growth.
• Work closely with managed service providers and delivery, vulnerability, and incident response teams.
• Participate in on-call and change management rotations.
• Demonstrate consistent, dependable attendance and punctuality.
• Foster an environment of acceptance and respect that strengthens relationships, and ensures authentic connections with colleagues, customers, and communities.
• In addition to the essential duties mentioned above, other duties may be assigned.

Skills You Will Need

Security Engineering & Software Development: Strong ability to design, develop, test, and deploy secure application systems, including new code development, enhancements, configuration, and package implementations.

Application & Infrastructure Security: Deep understanding of securing applications and infrastructure, including authentication, session management, encryption, web servers, and server-grade technologies such as DNS, SMTP, IIS, Apache, LDAP, and SQL.

Vulnerability Management & Risk Mitigation: Proven experience identifying, analyzing, and correlating technical vulnerabilities, implementing effective countermeasures, and remediating findings through patching or mitigation strategies.

Risk Assessment & Architecture: Ability to assess security risks across computer systems and applications, apply best practices, and contribute to secure, scalable architecture decisions.

Infrastructure as Code & CI/CD: Experience developing Infrastructure as Code and…