Cyber Security SEC Engineer

Job Description

Job Description

Position Summary

Demoulas Super Markets, Inc. (Market Basket) is seeking a self-driven Systems Security Engineer to join our IT Security team. This role supports the organization’s mission to manage digital risk by implementing and maintaining secure solutions while promoting a security-first culture across both technical and business teams.

The Systems Security Engineer is responsible for endpoint protection across on-prem and cloud environments, owning the endpoint security roadmap and driving continuous improvement across the enterprise. The core role includes implementing, monitoring, and enhancing security controls in alignment with architectural standards, best practices, and compliance requirements.

Additionally, the engineer serves as an escalation point for advanced troubleshooting and incident response, supports device inventory management, and maintains PKI services. They work closely with cross-functional teams as a trusted security partner while contributing to a collaborative, high-performing security team.

Key Responsibilities

• Apply security best practices to harden OSes, maintain secure configurations and reduce host attack surface.
• Ensure the security of containers and enforce policies to use trusted images.
• Define and document design requirements for hardware and software upgrades across platforms.
• Design for integrated security controls, workflows, data protection, authentication and authorization
• Report on key performance indicators, objectives and key results, and metrics to illustrate reduction in attack surface and host and platform resiliency.
• Attend project and implementation meetings and advise secure application and infrastructure configurations.
• Handle day-to-day implementation, monitoring and operational support of hardware, software, customer applications, managed solutions and service provider relationships.
• Actively participate and lead security team meetings that facilitate secure system design.
• Engage in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Additionally, deliver projects on time, within budget and in accordance with service level agreements (SLAs).
• Assist with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.
• Work in tandem with architects, the security operations center (SOC), incident responders (in cases of anomalous activity and host compromise), and technology infrastructure and development team members.
• Respond to and handle service and escalation tickets within SLA expectations.
• Develop security test plans from architectural design. Identify deficiencies and make enhancements to ensure production is not impacted.
• Participate regularly in change project and change management meetings.
• Research, validate and deploy solutions meeting security and business needs.
• Utilize subject matter expertise on specialized security technologies and disciplines to improve DSM’s security posture; implement, own and improve platforms and processes that align to these.
• Act as an independent change driver, with high sense of accountability to customers, technical peers, and overall strategic needs of security dept and wider business; assist with security configuration standards for systems and business applications
• Interface with internal and external auditors for risk assessments.
• Document system security playbooks and incident response procedures for dissemination to operational teams.
• Analyze security gaps and identify opportunities for tuning and improvements; develop and communicate plans of action to management and peers, engage with internal and external resources as necessary.
• Act as escalation point during incident response, participate in off-hours on-call rotation for business impacting issues and assist with risk management and incident response as needed:
  • Investigate and respond to security alerts and other cyber security incidents, triage with other technical teams to mitigate incidents and minimize impact.
  • Document security incidents and assess their impact, research solutions and make recommendations to prevent future incidents.
  • Work with security team to analyze and report on network, endpoint, and software vulnerabilities and drive to timely remediation.
  • Respond to end users’ security issues and concerns and enable them to securely carry out their jobs.
• Remain informed on IT security news, technology trends, and current threat landscape.

Qualifications & Experience

• At least 4-6 years of information security experience, or combination of 3-5 years of IT system administration and 3 years of security, working with computer networks, systems, and virtual/cloud environments in an enterprise setting; at least 3 years as an experienced practitioner in security disciplines such as vulnerability management, endpoint security, cloud security, and/or security operations
• Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation and delivery.
• Depth of practical experience with multiple operating systems, including Windows, Linux, and Android; track record of interpreting complex system issues and states
• Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private, and hybrid environments.
• Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, public key infrastructure (PKI), antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR/XDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls.
• Knowledge in one or more including PCI, HIPAA, GLBA, NIST or CIS.
• A proven aptitude for causal analysis, independent problem solving and troubleshooting.
• Scripting and automation skills preferred, having worked with APIs and scripting languages such as Python and PowerShell to investigate IOCs, solve technical challenges, and integrate tools for optimized workflows.

Skills & Personal Attributes

• Strong attention to detail with a focus on accuracy and compliance.
• Excellent written and verbal communication skills; candidate should possess a strong customer service focus.
• High level of integrity and discretion when handling sensitive information.
• Analytical and risk-aware mindset with sound judgment.
• Proactive and solution-oriented; able to identify gaps and drive remediation.
• Organized and able to manage multiple priorities in a deadline-driven environment.
• Clear, confident communicator with both technical and non-technical stakeholders.
• Self-motivated and able to work independently with minimal oversight.
• Adaptable and comfortable in evolving regulatory and security environments.
• Strong sense of ownership and accountability.

Why Join the Market Basket Technology Team?

Contribute to meaningful work – This role gives you the opportunity to support and enhance enterprise security across both on-prem and cloud environments. You’ll play a key role in implementing and maintaining endpoint protection and strengthening our overall security posture.

Make an impact across the business – Your work helps protect the systems that support our stores, distribution centers, and corporate teams. You’ll contribute to keeping our environment secure, reliable, and resilient at scale.

A company with long-term stability – Market Basket is a privately held, family-owned business with more than 100 years of steady growth. We focus on thoughtful decisions and long-lasting solutions.

A team that values collaboration – You’ll work closely with IT, infrastructure, and security teams to support secure system design, incident response, and ongoing security improvements across the organization.

Grow your expertise in security engineering – This role offers the opportunity to deepen your experience with endpoint security, incident response, and enterprise security tools while continuing to build your technical skill set.

Local, on-site collaboration – This is a full-time role in Andover, MA. You’ll work closely with the people and systems you support, enabling strong communication and effective execution.

A trusted New England brand – Market Basket remains one of the top grocery chains in the region. As we continue to invest in our technology and security, you’ll play a key role in supporting what comes next.

If you’re looking for a role where you can build on your experience, contribute to critical security initiatives, and grow within a stable, team-oriented environment, this is a place where your work will have steady impact.

Demoulas Super Markets, Inc. operating for over 100 years, is a leader in the grocery industry with 90+ retail stores and three distribution centers currently spanning Massachusetts, New Hampshire, Maine and Rhode Island. Operating under the Market Basket and MB Spirits banner, our team focuses on providing great customer service and quality products, at “More for Your Dollar” prices in the greater communities we serve.

Company Description

Demoulas Super Markets, Inc. operating for over 100 years, is a leader in the grocery industry with 90+ retail stores and three distribution centers currently spanning Massachusetts, New Hampshire, Maine and Rhode Island. Operating under the Market Basket and MB Spirits banner, our team focuses on providing great customer service and quality products, at “More for Your Dollar” prices in the greater communities we serve.