ABOUT THE POSITION

Although we're an apparel and footwear-focused company, technology is central to everything we do. Columbia Sportswear's Digital Technology (CDT) teams enable an IT infrastructure across four global brands, a global supply chain, and 500+ geographically dispersed stores. These teams support in-store, mobile, and data platforms to enhance customer interface and service in an ever-evolving industry.

The Cybersecurity Engineer supports the global Information Security team with maintaining and improving information security systems.

HOW YOU'LL MAKE A DIFFERENCE

• Works across multiple teams to design, develop, implement, maintain, improve and manage information security technology solutions protecting, detecting, responding to, and containing technology risks to the digital landscape.
• Participates in examining the use of new technologies and capabilities to support constantly changing digital landscape to meet business objectives, ensuring solutions meet security requirements and align to corporate information security posture.
• Assists Information Security staff as needed with the phases of information security incident management and other security events to protect corporate IT assets, intellectual property, regulated data and the company's reputation.
• Works with global Information Security tools and programs (e.g., vulnerability detection (VM), endpoint security (EDR), log correlation (SIEM), etc.).
• Performs other duties, as assigned.

YOU ARE

• Able to demonstrate a working knowledge of maintaining enterprise security tools and capabilities.
• Able to work both individually and as part of a team.
• Enterprise focused. You aren't a siloed thinker, but consider impacts across regions, functions, and technologies.
• Relationship driven. You build rapport and support your team.
• Able to communicate effectively in writing and presentations

YOU HAVE

• Associates degree or 2+ year of equivalent experience with one or more Information Security certifications (e.g. GCIH, GCFE, GCFA, GREM, GCED, SEC+, etc.).
• Scripting experience preferred (e.g., Python, PowerShell, bash, etc.)
• Knowledge of industry and regulatory security standards and frameworks (e.g., NIST CSF, ISO 27001, SOX, PCI/DSS, GLBA, GDPR, and CCPA).
• Understanding of security protocols, hybrid and multi-cloud architecture, security controls, modern threats, and countermeasures.

This job description is not meant to be an all-inclusive list of duties and responsibilities, but constitutes a general definition of the position's scope and function in the company.