Senior Information Security Engineer at Brooks Running

At Brooks, we believe that movement is the essential ingredient to feeling truly alive. We are dedicated to creating gear and experiences that help people reach their personal finish lines, whether that is a specific goal or a state of mind. Our culture is fueled by collaboration, creativity, and a shared passion for innovation. We operate under core values like Runner First, Word is Bond, and Champion Heart, and we are looking for individuals who want to join us on this journey. We are currently seeking a Senior Information Security Engineer to join our team in a full-time, remote capacity. Please note that for this role, you must be located in WA, OR, CA, MT, CO, ID, or NV.

Key outcomes

• Design and implement robust security controls to protect our business against real-world threats like ransomware, data theft, and account takeovers.
• Serve as a security consultant for internal IT projects, ensuring that security requirements are integrated into all new enterprise technologies and infrastructure.
• Optimize network boundary protections, including firewalls, VPNs, and wireless security, while managing tools such as SIEM, PAM, and multi-factor authentication.
• Act as an escalation point for investigating cyber alerts and incidents to ensure a swift and thorough response.
• Influence internal stakeholders through negotiation and persuasion to accomplish security goals, even in areas where you may not be the primary technical expert.
• Foster a culture of security awareness by providing training, presentations, and educational briefings to your colleagues.
• Identify and document improvements to existing security controls to ensure they remain effective as our technology stack evolves.

Requirements

• At least 7 years of experience in maturing and improving information security programs.
• Strong understanding of infrastructure technologies, including Active Directory, virtualization, and Windows operating systems.
• Functional knowledge of networking protocols such as TCP/IP, IPSEC, VPN, MPLS, and SD-WAN.
• Proven experience implementing security controls like EDR, SSO, email filtering, and IDS/IPS.
• Proficiency in using SIEM tools for log collection and incident investigation.
• Solid grasp of cryptography basics, including PKI, TLS certificates, and public/private keys.
• Familiarity with security frameworks such as NIST, CIS Top 18, and PCI DSS.
• Excellent communication skills with the ability to negotiate and influence without direct authority.
• Analytical mindset with the ability to identify vulnerabilities and suggest cost-effective, alternative solutions.
• A bachelor’s degree in IT, Computer Science, or a related field is preferred.

Preferred qualifications

• Professional certifications such as CISSP, GCIH, or CySA+ are considered a plus.

Compensation

The base pay for this position ranges from $115,493 to $210,680 per year, depending on your specific geographic market, skills, and experience. In addition to base salary, you may be eligible for an annual bonus based on company performance.

We provide a comprehensive benefits package that includes medical, dental, and vision insurance, disability coverage, a 401k savings plan with a company match, and life insurance. Our employees also enjoy generous paid time off, including up to five weeks of vacation, eleven holidays, and paid parental and sick leave. Additional perks include product discounts, fitness discounts, and volunteer benefits.

How to apply

If you are passionate about security and want to help protect the future of our business, we invite you to apply. We celebrate diversity and are committed to creating an inclusive environment for all employees. We look forward to reviewing your application.