Senior Analyst, Cybersecurity Infrastructure - Engineer II

Senior Analyst, Cybersecurity Infrastructure - Engineer II

About Estée Lauder Companies

The Estée Lauder Companies is the global leader in prestige beauty — delighting consumers with transformative products and experiences, inspiring them to express their individual beauty. We are the only company focused solely on prestige makeup, skincare, fragrance, and hair care with a diverse portfolio of 25+ brands sold in approximately 150 countries and territories. Infused throughout our organization is a passion for creativity and imagination — a desire to push the boundaries and invent the unexpected — as we continue the bold work of our founder Estée Lauder.

Who We Are

Do you want to be part of the team catalyzing digital innovation, harnessing the power of data, and transforming the fabric of security across the world’s most prestigious beauty, skincare, and luxury fragrance brands? Then join the information security and technology team, Enterprise Cybersecurity & Risk (ECR) at Estée Lauder Companies (ELC). ECR’s security team fuels cyber defense, technology excellence, risk and compliance, and global resilience. We stay at the forefront of cyber threats to deliver fit-for-purpose tools, technologies, and processes that protect ELC’s business operations and empower secure strategic growth. If you thrive in change-rich entrepreneurial environments, then this is the team for you. From our fast-paced delivery plans to our global team expansion, this is an exciting time to join us!

What You’ll Do

The Cybersecurity Infrastructure - Engineer II will be forward-thinking and self-motivated, responsible for leading and driving best practices oversight for our Network, Endpoint, and Server Cyber Security Tools and Controls across complex on-premises, Cloud, and multi-partner environments.

You will be responsible for:

• Support the communication and implementation of a secure design on on-premises and cloud networks and platforms.

• Experience with Network Security Controls such as Next Gen Firewalls, IDS, IPS, and Network Sandboxing.

• Strong end-to-end troubleshooting experience diagnosing performance and network control issues.

• Strong critical thinking, deductive reasoning, prioritization, and problem-solving skills.

• Help facilitate deployment orchestration and automation with a focus on security with tools such as Ansible, Terraform, Python, PowerShell, or Shell Scripting.

• Proactively introduce security guidelines to development teams and work with the teams to implement security patterns.

• Act as a resource for the team at large about security best practices, techniques, and lessons learned.

• Provide insights and advice into the maintenance of security policies and standards for all deployment environments.

• Support the Security Operations Center for any relevant incidents.

Who You Are

The Cybersecurity Infrastructure - Engineer II will partner with the entire organization and work collaboratively as part of the Global Security Engineering and Operations Team to support a variety of activities to protect the confidentiality, integrity, and availability of Estee Lauder’s Global Business and IT functions.

Must have excellent track record and proven ability to produce effective, innovative solutions on an enterprise scale. Constantly working to mature/improve the team’s overall processes and protection/detection/response capabilities. Provide mentorship to the junior members, bringing them up to speed swiftly. Overhaul our documentation repositories, as well as guide improvements.

• Minimum of 2-3 years of relevant cybersecurity expertise and 2-3 years of relevant network/systems expertise.

• Bachelor's degree in a related field or equivalent demonstrated experience and knowledge.
• Extensive technical knowledge in at least 3 of the following areas: Network Segmentation Techniques, Secure Web Gateways, Next-Generation Firewalls, Network Admission Control Systems, Hybrid Cloud Environments (AWS, Azure), Wireless Security, or DHCP, DNS and IPAM (DDI), Virtual Private Network (VPN)
• Strong understanding of network technologies, including, but not limited to Routing and Switching Protocols, IPsec and GRE tunnels, RADIUS, TACACS+, VRFs Working knowledge of cybersecurity controls and technologies, such as Intrusion Detection/Prevention Systems (IPS/IDS), Security Incident Event Managers (SIEM), Public Key Infrastructure (PKI), Tunnel Layer Security (TLS), Endpoint Detection and Response (EDR), and Threat Intelligence platforms.

• Excellent experience and knowledge of multi-tiered network applications, common ports, and protocols used in those communications.

• Excellent verbal and written communication skills Ability to prioritize multiple simultaneous projects.

• Strong analytical and organizational skills

• Regular expression, scripting, and programming experience are preferred.