Senior Engineer, IT Security

Your Dreams, Our Future.

Join the dynamic and diverse team at Shiseido Americas, a subsidiary of the world-renowned Shiseido Company Limited. Be a part of a portfolio of prestige beauty brands which includes Clé de Peau Beauté, Drunk Elephant, Dr. Dennis Gross Skincare, NARS, SHISEIDO and several prestige fragrance brands including Issey Miyake, Narciso Rodriguez and Tory Burch. At Shiseido Americas we value and celebrate human diversity, with a rich tapestry of employees from all backgrounds and experiences.

Headquartered in New York City with US offices and facilities located in New Jersey, Ohio, Texas and Florida, Shiseido Americas employs over 2,000 individuals in the US, Canada, and Latin America. Shiseido Americas is a hub of talent and innovation. Be inspired by the array of skills, knowledge, and integrity of your colleagues, and join our driving force as Shiseido continues its pursuit of beauty innovations for a better world.

At Shiseido Americas, we focus on our people. We strive to foster a collaborative workplace culture where creative thinking, inclusivity and unique diverse perspectives are celebrated in order to drive success for both our employees and the company as a whole. By prioritizing our team and promoting an open-minded environment, we push the boundaries of what's possible and bring new ideas to life.

JOB SUMMARY

This position is accountable for IT security for the Americas region.  Specifically, assists with the design, deployment, documentation, integration and initial configuration of all new security solutions and any enhancements to existing security services in accordance with the best standard operating procedures. Manages the administration of all security systems and their corresponding or associated software, including firewalls, VPNs, intrusion detection, incident response, cryptography, content filters, and anti-malware systems. Creates and propagates security awareness and training programs among employees. Oversees change control processes and security governance for the region. This position will be key to the execution of the overall security strategy that is developed for the region. Security Engineer supports and maintains operations along with our Security Analyst as part of the IT Security department team.

The Security Associate Manager will oversee day-to-day security operations, leads security team and implement risk management protocols to safeguard the organization’s assets, infrastructure, and business services. Reporting to senior security leadership in HQ and regional VP, this role bridges strategic planning and tactical execution, driving operational excellence, regulatory compliance, and cross-departmental security initiatives.

WHAT YOU WILL DO 

• Manages and secures all IT security services for the Shiseido Americas region.
• Development, Support, and Monitoring of Regional / Global Security Infrastructure program
• Responsible for PCI and PII compliance, including providing oversight for vendors providing QSA services and driving remediation plans and processes.
• Demonstrates an understanding of comprehensive regional /global security programs, including technologies and tools, architecture and network and application design, and policies / business aspects of risk.
• Demonstrates expertise in performing IT Risk & Security assessments and developing information security strategies and appropriate policies.
• Recommend security solutions to assist with the assessment and improvement of Shiseido Networks security infrastructure as well as demonstrate a strong understanding of the IT security landscape, including emerging risks and security solutions.
• Translate business needs and regulatory requirements into risk appropriate controls to successfully implement security policies, standards and guidelines.
• Develops, implements, manages, advises, surveys or audits all security programs, policies and procedures.
• Develops training and awareness efforts for employees, contractors and visitors to establish a “culture of care” to prevent or mitigate security incidents.
• Develop metrics to measure the effectiveness and efficiency of all security programs and personnel.
• Acts as lead or technical support for major incident investigations involving security related issues.
• Ensures adherence to protocols for 24x7x365 response and notifications for alarms, emergencies, or critical incidents.
• Analyze complexity and feasibility of new or changed requirements.
• Maintain documentation relevant to operations (high and low-level designs, operation manual, installation guide, etc.)
• Is responsible to integrate 3rd party security software into Shiseido (off the shelf or on behalf development within Shiseido)
• Operational Oversight: Direct daily security workflows, incident response protocols, and physical/digital security monitoring, acting as the first point of escalation for critical security events.
• Cross-Functional Alignment: Partner with business departments to integrate security controls into broader business operations and coordinate joint emergency procedures.
• Metrics & Performance Tracking: Define and monitor key performance indicators (KPIs) and service level agreements (SLAs) for security operations, presenting regular status reports to senior leadership. Introduce dashboards and automated reporting capabilities.
• Vendor & SLA Management: Supervise third-party security contractors and service providers, ensuring compliance with contractual obligations, IT Security standards, and budget allocations.
• You will perform other duties as assigned.

WHO YOU ARE 

• At least 7 - 10 years’ experience working in a progressive information security operations or engineering group.
• Bachelor’s or Advanced degree in Security Engineering, Computer Science, or related field
• Strong knowledge of application architectures, enterprise architecture, release methodologies, project management, technical support, production support, client/server applications, internet/ intranet applications, and SaaS computing
• Outstanding collaboration and team building skills. Strong written and verbal communication skills.
• Proven hands-on experience with firewalls and knowledge of IP networking and network security including Intrusion Detection, DMZ, encryption, IPSec, PKI, VPNs, MPLS/VPN, Site to Site VPN tunnels, SSL/VPN, proxy services, secure SD-WAN and DNS operations.
• Good understanding of AI Security Foundation and models. Workflow security and agentic / generative AI services (i.e., CoPilot, Claude and Gemini).
• Knowledge of ZScaler Zero Trust, Palo Global Protect & CyberArk Privilege Access, a PLUS.
• Extensive PCI, PII and Data Classification knowledge, preparation, mitigation, remediation and overall readiness.
• Azure cloud architecture and Landing Zone methodology knowledge.
• Cloud security and administration experience.
• Splunk experience, a PLUS
• Ability to oversee SOC managed services.
• CISSP certification preferred
• Hands On Qualys, Microsoft Sentinel and LogRhythm experience desired.
• CASB experience and knowledge.
• Vulnerability management.
• Hands-on Email and Web Filtering Administration.
• Hands-on with security investigation and analysis.
• Proven record in an IT Security Engineering role.
• Planning and implementing comprehensive security strategies.
• Gathering security intelligence and implementing preventative measures.
• Developing work schedules, allocating tasks, and monitoring personnel performance.
• Coordinating responses to emergencies and alarms, as well as compiling incident reports.
• Preparing surveillance equipment maintenance schedules and facilitating repairs in a timely manner.
• Keeping abreast of new technologies and advancements in security services.
• Ensuring compliance with company policies and security industry regulations.

#LI-Remote #Nylaw

You may be asked to perform other duties needed to help drive to our vision, fulfill our mission and abide by our organization’s values.

What We Can Offer You

At Shiseido Americas, our pride extends beyond our rich legacy to our passionate and talented team that brings it to life every day. We recognize that without our people, innovation would not be possible. That's why we go above and beyond with our comprehensive benefits program to recognize our employees. With an array of options designed to give our employees peace of mind, our perks & benefits program is more than just a perk – it's an investment in our people's futures. Whether you're looking for comprehensive health coverage, retirement savings, or paid time off, our benefits have you covered! Check out a list of our Benefits and Perks offerings:

· Medical, Dental, & Vision Insurance

· Life and Disability Insurance

· Paid Time Off

· Paid Volunteer Days

· Paid Company Holidays

· Paid Parental Leave

· 401K with 6% Company Match

· Talent Development & Learning Programs

· Internal & International Mobility

· Product Discounts & Annual Gratis

· Employee Led Affinity Groups

· Tuition Reimbursement

The base pay for this position may vary based on geographic location. Actual base pay offered will be based on several factors including job-specific knowledge, education, skills, and depth of experience. In addition to base pay, we may offer additional forms of compensation as components of a total compensation package, including participation in our bonus program which features the ability to overachieve, in addition to a full range of competitive benefits.

Shiseido is an Equal Opportunity Employer and does not discriminate on the basis of race, color, gender identity, religion, sex, age, national origin, disability, veteran status, sexual orientation, genetic information or any other classification protected by Federal, State or Local law