Company:Driven Brands
Driven Brands is North America's largest automotive services company with a portfolio of iconic brands including Take 5 Oil Change®, Meineke Car Care Centers®, Maaco®, 1-800-Radiator & A/C®, Auto Glass Now®, and CARSTAR®. Our vision is to fuel the pursuit with the simplest, most convenient, and most reliable car care experience.
Headquartered in Charlotte, NC, Driven Brands is more than a workplace. We're a launchpad — for careers, for dreams, and for people driven to do great things.
Every day, we fuel the pursuit — for our customers chasing life's moments, for our franchisees building lasting legacies, and for each other as we grow, lead, and succeed together.
Performance matters. We take pride in it. We own it. We show up for one another and for our communities.
Because at Driven Brands, we're not just fixing cars. We're building futures, unlocking potential, and fueling what's possible — together.
JOB DESCRIPTION:
We are looking for a Senior Cybersecurity Engineer to protect our people, data, and operations from modern threats, including those enabled by AI (Artificial Intelligence). You will serve as a technical authority on both sides of cybersecurity: defending against active threats, and designing and engineering cybersecurity into every layer of our technology environment. You will partner with IT, Legal, and business leaders to reduce risk across the enterprise.
How you will Own It:
Threat Defense
Lead investigation and containment of phishing, account compromise, and endpoint and network threats, correlating signals across endpoint, identity, email, and network data.
Monitor and triage alerts, and investigate anomalous identity and email activity, including suspicious sign-ins and business email compromise indicators.
Execute rapid response actions, such as disabling accounts, revoking sessions, and blocking indicators, and document root cause and remediation for leadership and auditors.
Develop and tune detections and response playbooks based on emerging threats, including AI-enabled attacks, and lessons learned from incidents.
Coordinate major incident response across IT, Legal, and external response partners, and strengthen readiness through tabletop exercises and post-incident reviews.
Perform forensic evidence collection and support legal holds and eDiscovery in partnership with Legal.
Share in an on-call rotation providing escalation coverage.
Cybersecurity Engineering
Architect and engineer cybersecurity solutions across the full technology stack, including endpoints, networks, identity, email and collaboration, cloud, applications, data, AI systems, and infrastructure, from requirements and design through implementation and lifecycle management.
Apply secure-by-design principles such as least privilege, defense in depth, zero trust, and segmentation, using threat modeling and architecture reviews, and maintain cybersecurity standards, reference architectures, and hardened baselines that are monitored for drift.
Design and govern identity and access controls with identity and infrastructure teams, including conditional access, network restrictions, privileged-access processes, and non-human identities.
Secure cloud and hybrid infrastructure through configuration standards, posture management, and guardrails that scale across environments.
Automate and codify cybersecurity controls, deployments, and workflows to reduce manual effort, variance, and risk.
Validate and release controls through testing, staged rollouts, and change management, operate cybersecurity platforms for resilience, coverage, and telemetry quality, and evaluate and integrate new technologies through proofs of concept.
Drive vulnerability and exposure reduction with infrastructure, cloud, and application owners, prioritizing by business impact and fixing root causes rather than applying one-off patches.
Risk & Governance
Assess AI and software vendors for cybersecurity, data protection, and governance risk, and deliver…