KERING Cybersecurity Engineer
Job Family: Tech & Digital Core Engineering
Job Title: Cybersecurity Engineer
Location: Wayne, NJ
Kering is a global, family-led luxury group, home to people whose passion and expertise nurture creative Houses across couture and ready-to-wear, leather goods, jewelry, eyewear and beauty: Gucci, Saint Laurent, Bottega Veneta, Balenciaga, McQueen, Brioni, Boucheron, Pomellato, Dodo, Qeelin, Ginori 1735, as well as Kering Eyewear. Inspired by their creative heritage, Kering Houses design and craft exceptional products and experiences that reflect the Group’s commitment to excellence, sustainability and culture. This vision is expressed in our signature: Creativity is our Legacy.
HOW YOU WILL CONTRIBUTE
Incident Response and Security Operations
- Act as the AMER cybersecurity point of contact for the identification, analysis, containment, remediation, and follow-up of cybersecurity incidents
- Operate as a virtual member of the global Company CERT and contribute to incident response activities during AMER business hours
- Coordinate incident resolution with local Technology teams, brand cybersecurity teams, infrastructure and application teams, external providers, and global cybersecurity functions
- Perform technical investigations using available security tools, logs, threat intelligence, and digital evidence
- Support crisis-management activities during major cybersecurity incidents and contribute to clear operational and executive reporting
- Participate in the development, testing, and continuous improvement of incident-response procedures, playbooks, escalation processes, and communication mechanisms
- Contribute to lessons-learned exercises and ensure that corrective and remediation actions are identified, assigned, and monitored
- Support vulnerability-management and technical-remediation activities in coordination with global and regional security teams
PCI DSS Compliance
- Contribute to the global PCI DSS program, with a particular focus on AMER and US operations
- Coordinate local PCI DSS compliance activities with Technology teams, business stakeholders, brands, assessors, acquirers, and external service providers
- Support PCI DSS compliance for stores, retail payment environments, call centers, e-commerce platforms, and their supporting infrastructure
- Assist brands and technical teams in defining PCI DSS scope, identifying payment-data flows, maintaining inventories, and understanding control responsibilities
- Collect, review, and maintain compliance evidence, technical documentation, procedures, and control records
- Contribute to PCI DSS assessments, internal reviews, external audits, penetration tests, vulnerability scans, and remediation plans
- Monitor identified compliance gaps and coordinate the implementation and closure of associated corrective actions
- Support the harmonization and continuous improvement of PCI DSS controls across different brands, platforms, and business models
- Provide regular reporting on compliance status, risks, remediation progress, and key areas requiring management attention
Security Engineering and Continuous Improvement
- Provide security guidance to IT and business project teams, particularly for payment, retail, call-center, and e-commerce initiatives
- Contribute to technical cybersecurity programs delivered as part of the Group cybersecurity transformation.
- Support security assessments and provide guidance on secure architecture and appropriate technical controls
- Help industrialize recurring security, compliance, evidence-collection, and remediation activities
- Contribute to internal and external audits and monitor the completion of associated action plans
- Identify opportunities for automation, integration, and process improvement across security operations and PCI DSS compliance.
- Produce clear operational, technical, compliance, and management-level reports
Who You Are
Required Experience and Skills
- Ideally, you hold a Bachelor’s or Master’s degree with a specialization in cybersecurity, information systems, networks, or software development.
- You have solid experience in cybersecurity detection and incident response, ideally gained within a SOC, CSIRT or CERT environment, and are comfortable handling complex investigations with a high degree of autonomy.
- You have strong knowledge of security monitoring and investigation technologies, including SIEM and EDR, and a good understanding of Windows, Linux, network and cloud environments. Experience with scripting languages such as Python or PowerShell, Bash and the ability to automate investigation or response activities are strong assets.
- You combine strong analytical and problem-solving skills with a structured approach to incident handling. You are comfortable working in an international environment, communicating technical findings clearly and collaborating with teams across different functions and regions.
- Previous exposure to PCI DSS, payment environments, retail technology, call centers, or e-commerce platforms would be a strong advantage.
- You are comfortable working across multiple brands, entities, technical environments, and time zones within a global organization.
Technical Expertise
- Strong understanding of cybersecurity incident-response processes, including detection, analysis, containment, eradication, recovery, and post-incident review.
- Experience investigating incidents using SIEM, EDR/XDR, network-security, cloud-security, threat-intelligence, and logging solutions.
- Strong understanding of networks, protocols, systems, applications, identities, and security architectures.
- Understanding of key cybersecurity controls applicable to corporate, retail, payment, cloud, and e-commerce environments.
- Knowledge of PCI DSS requirements and payment-card environments, or the ability to rapidly develop expertise in these areas.
- Experience in vulnerability management, technical remediation, security testing, or audit-action-plan management.
- Ability to analyze structured and unstructured information and translate technical findings into actionable recommendations.
- Ability to develop integrations, scripts, queries, or automation supporting security operations and compliance activities would be an advantage.
Expected Qualities
- 2 years of experience in Cybersecurity engineering
- Passionate about cybersecurity and technology, with strong curiosity and a continuous-learning mindset.
- Hands-on, pragmatic, and comfortable taking ownership of operational topics.
- Able to remain calm, structured, and effective during cybersecurity incidents or high-pressure situations.
- Strong analytical, problem-solving, and organizational skills.
- Excellent written and verbal communication skills.
- Able to communicate technical and compliance topics clearly to both technical and non-technical stakeholders.
- Comfortable working in a matrixed, multicultural, and international organization.
- Collaborative, service-oriented, and able to build trusted relationships with brands, Technology teams, and global functions.
- Capable of managing multiple priorities while maintaining strong attention to detail.
- Professional certifications: Microsoft, Linux, cloud, CISSP, CISM, or CEH.
- Penetration testing certifications: CEH, GXPN, or GPEN.
Languages
- Fluent English is mandatory.
- Additional languages used across the Group or the AMER region would be an advantage.
Salary: $135,000 - $145,000 per year plus incentives
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing programs.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, basic life and AD&D insurance, and short-term disability insurance.
