KERING Cybersecurity Engineer

SummaryWe are currently looking for a Cybersecurity Engineer to join our Americas regional cybersecurity team. The role will operate in close collaboration with AMER Technology teams, local business functions, the global Company CERT, the Group PCI DSS program, and the cybersecurity teams of our brands.This is a hands-on role combining operational security, incident response, compliance, technical coordination, and continuous improvement in a complex, international, and highly distributed environment.Your Opportunity:As AMER Cybersecurity Engineer, you will play a key role in strengthening cybersecurity operations across the Americas. You will contribute to incident response activities as a virtual member of the global Company CERT, providing regional coverage, technical expertise, and coordination during cybersecurity incidents. You will also contribute to the global PCI DSS compliance program, coordinating local US compliance activities and supporting the security and compliance of stores, call centers, and e-commerce platforms operated by different brands across the Group.Job DescriptionKERING Cybersecurity EngineerJob Family: Tech & Digital Core EngineeringJob Title: Cybersecurity EngineerLocation: Wayne, NJKering is a global, family-led luxury group, home to people whose passion and expertise nurture creative Houses across couture and ready-to-wear, leather goods, jewelry, eyewear and beauty: Gucci, Saint Laurent, Bottega Veneta, Balenciaga, McQueen, Brioni, Boucheron, Pomellato, Dodo, Qeelin, Ginori 1735, as well as Kering Eyewear. Inspired by their creative heritage, Kering Houses design and craft exceptional products and experiences that reflect the Group’s commitment to excellence, sustainability and culture. This vision is expressed in our signature: Creativity is our Legacy.HOW YOU WILL CONTRIBUTEIncident Response and Security OperationsAct as the AMER cybersecurity point of contact for the identification, analysis, containment, remediation, and follow-up of cybersecurity incidentsOperate as a virtual member of the global Company CERT and contribute to incident response activities during AMER business hoursCoordinate incident resolution with local Technology teams, brand cybersecurity teams, infrastructure and application teams, external providers, and global cybersecurity functionsPerform technical investigations using available security tools, logs, threat intelligence, and digital evidenceSupport crisis-management activities during major cybersecurity incidents and contribute to clear operational and executive reportingParticipate in the development, testing, and continuous improvement of incident-response procedures, playbooks, escalation processes, and communication mechanismsContribute to lessons-learned exercises and ensure that corrective and remediation actions are identified, assigned, and monitoredSupport vulnerability-management and technical-remediation activities in coordination with global and regional security teamsPCI DSS ComplianceContribute to the global PCI DSS program, with a particular focus on AMER and US operationsCoordinate local PCI DSS compliance activities with Technology teams, business stakeholders, brands, assessors, acquirers, and external service providersSupport PCI DSS compliance for stores, retail payment environments, call centers, e-commerce platforms, and their supporting infrastructureAssist brands and technical teams in defining PCI DSS scope, identifying payment-data flows, maintaining inventories, and understanding control responsibilitiesCollect, review, and maintain compliance evidence, technical documentation, procedures, and control recordsContribute to PCI DSS assessments, internal reviews, external audits, penetration tests, vulnerability scans, and remediation plansMonitor identified compliance gaps and coordinate the implementation and closure of associated corrective actionsSupport the harmonization and continuous improvement of PCI DSS controls across different brands, platforms, and business modelsProvide regular reporting on compliance status, risks, remediation progress, and key areas requiring management attentionSecurity Engineering and Continuous ImprovementProvide security guidance to IT and business project teams, particularly for payment, retail, call-center, and e-commerce initiativesContribute to technical cybersecurity programs delivered as part of the Group cybersecurity transformation.Support security assessments and provide guidance on secure architecture and appropriate technical controlsHelp industrialize recurring security, compliance, evidence-collection, and remediation activitiesContribute to internal and external audits and monitor the completion of associated action plansIdentify opportunities for automation, integration, and process improvement across security operations and PCI DSS compliance.Produce clear operational, technical, compliance, and management-level reportsWho You AreRequired Experience and SkillsIdeally, you hold a Bachelor’s or Master’s degree with a specialization in cybersecurity, information systems, networks, or software development.You have solid experience in cybersecurity detection and incident response, ideally gained within a SOC, CSIRT or CERT environment, and are comfortable handling complex investigations with a high degree of autonomy.You have strong knowledge of security monitoring and investigation technologies, including SIEM and EDR, and a good understanding of Windows, Linux, network and cloud environments. Experience with scripting languages such as Python or PowerShell, Bash and the ability to automate investigation or response activities are strong assets.You combine strong analytical and problem-solving skills with a structured approach to incident handling. You are comfortable working in an international environment, communicating technical findings clearly and collaborating with teams across different functions and regions.Previous exposure to PCI DSS, payment environments, retail technology, call centers, or e-commerce platforms would be a strong advantage.You are comfortable working across multiple brands, entities, technical environments, and time zones within a global organization.Technical ExpertiseStrong understanding of cybersecurity incident-response processes, including detection, analysis, containment, eradication, recovery, and post-incident review.Experience investigating incidents using SIEM, EDR/XDR, network-security, cloud-security, threat-intelligence, and logging solutions.Strong understanding of networks, protocols, systems, applications, identities, and security architectures.Understanding of key cybersecurity controls applicable to corporate, retail, payment, cloud, and e-commerce environments.Knowledge of PCI DSS requirements and payment-card environments, or the ability to rapidly develop expertise in these areas.Experience in vulnerability management, technical remediation, security testing, or audit-action-plan management.Ability to analyze structured and unstructured information and translate technical findings into actionable recommendations.Ability to develop integrations, scripts, queries, or automation supporting security operations and compliance activities would be an advantage.Expected Qualities2 years of experience in Cybersecurity engineeringPassionate about cybersecurity and technology, with strong curiosity and a continuous-learning mindset.Hands-on, pragmatic, and comfortable taking ownership of operational topics.Able to remain calm, structured, and effective during cybersecurity incidents or high-pressure situations.Strong analytical, problem-solving, and organizational skills.Excellent written and verbal communication skills.Able to communicate technical and compliance topics clearly to both technical and non-technical stakeholders.Comfortable working in a matrixed, multicultural, and international organization.Collaborative, service-oriented, and able to build trusted relationships with brands, Technology teams, and global functions.Capable of managing multiple priorities while maintaining strong attention to detail.Professional certifications: Microsoft, Linux, cloud, CISSP, CISM, or CEH.Penetration testing certifications: CEH, GXPN, or GPEN.LanguagesFluent English is mandatory.Additional languages used across the Group or the AMER region would be an advantage.Salary: $135,000 - $145,000 per year plus incentivesHealth benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing programs. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, basic life and AD&D insurance, and short-term disability insurance.Job TypeRegularStart Date2026-12-31ScheduleFull timeOrganizationKering Americas Inc.Department:Tech & Digital