Title:  Security Engineer, Cyber Defense

Job Description

The Security Engineer, Cyber Defense is responsible for strengthening Aramark’s defensive posture by ensuring infrastructure, cloud workloads, and applications are built and maintained to secure baselines. This role serves as the engineering bridge between attack surface management, incident response, and long-term protection. 

The Security Engineer works closely with the ASM analyst, Security Incident Response, Risk Management and enterprise/LOB IT partners to implement hardening standards, remediate vulnerabilities, and enforce Zero Trust controls around Aramark’s most critical assets. 

Job Responsibilities

Key Responsibilities 

Secure Configuration & Hardening 

Develop, maintain, and enforce secure configuration baselines across servers, endpoints, and cloud workloads. 

Collaborate with IT and cloud engineering teams to implement guardrails (e.g., GPOs, Azure Policy, AWS Config). 

Remediation & Resilience 

Translate ASM/VM findings into prioritized engineering actions. 

Lead remediation campaigns for misconfigurations and vulnerabilities, verifying successful closure. 

Apply incident response lessons learned to prevent recurrence of exploits. 

Tool & Process Engineering 

Integrate hardening and compliance policies into platforms such as Qualys, Wiz, CrowdStrike, and Sentinel. 

Support tuning of SIEM/EDR/SOAR pipelines to reflect and enforce secure baselines. 

Automate reporting on compliance drift and resilience improvements. 

Zero Trust & Protect Surface Enablement 

Partner with IAM and Data Protection teams to implement least privilege and segmentation around critical protect surfaces. 

Apply hardening and defensive controls to identities, applications, and sensitive data flows. 

Collaboration & Knowledge Sharing 

Provide technical guidance and playbooks for IT partners to improve baseline security. 

Contribute to Cyber Defense dashboards, metrics, and reporting for leadership. 

Qualifications

Qualifications 

Education/Experience 

Bachelor’s degree in Cybersecurity, IT, or related field; equivalent experience considered. 

5–7 years of security engineering, system administration, or cloud engineering experience. 

Technical Skills 

Knowledge of Windows/Linux hardening, endpoint management, and cloud security controls (Azure/AWS). 

Familiarity with configuration management and IaC tools (Ansible, Terraform, Intune, SCCM). 

Experience with vulnerability management and compliance frameworks (CIS, NIST, ISO). 

Exposure to SIEM/EDR/ASM tooling (Sentinel, CrowdStrike, Wiz, Qualys, Cribl). 

Soft Skills 

Analytical mindset with strong problem-solving skills. 

Ability to partner with cross-functional teams in IT, cloud, and operations. 

Clear communicator able to translate technical risk into business impact. 

Success Measures 

Reduction in repeat vulnerabilities and misconfiguration-driven incidents. 

Improved compliance scores across Wiz, Qualys, and Sentinel baselines. 

Demonstrated resilience improvements tied to incident response findings. 

Measurable contributions to Zero Trust adoption and protect surface maturity. 

Education

About Aramark

Our Mission

Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.

At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.

About Aramark

The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.