Senior Application Security Engineer

CULTIVATE A BETTER WORLD

Food served fast does not have to be a typical fast-food experience. Chipotle has always done things differently, both in and out of our restaurants. We are changing the face of fast food, starting conversations, and directly supporting efforts to shift the future of farming and food. We hope you will join us as we continue to learn, evolve, and shape what comes next on our mission to make better food accessible to everyone.

THE OPPORTUNITY

As the Senior Application Security Engineer you will be responsible for the planning, coordinating, and implementing of security measures for IT systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.  You will help lead and mentor the security team, jumping in with a helping hand when needed, to work with all facets IT as a peer, and interface with all of Chipotle to ensure we are meeting the needs of all in a secure manner. The Security Application Engineer will be responsible for IT Security (ITSec) that includes but is not limited to: restaurant ITSec solutions, corporate ITSec solutions, and logging all other security tools as assigned.  S/he is also responsible for ITSec documentation and leading incident investigations and be responsible for appropriate analysis, remediation, and remediation management activities.

LOCATION

This position will be based on site in our Newport Beach, CA office. Remote work is not available for this role.

WHAT YOU’LL DO

• Serve as an internal security subject matter expert while interfacing with applicable departments, groups, and individuals on relevant security initiatives and concerns.

• Facilitate the security baked into our applications throughout the software development lifecycle.

• Evangelize software security best practices through training and information sharing.

• Design and implement AI security testing protocols to ensure the security and integrity of LLMs.

• Develop and execute AI benchmarking and safety testing strategies for internal applications.

• Partner closely with engineering and product teams to improve the security of Chipotle Mexican Grill’s products.

• Mentor and train others to help develop personnel and ensure cross training for better coverage.

• Manage relationships with the Application Development community, Systems Engineer(s), and Database Administrator(s) to ensure performance, functionality and compliance as it relates to internal IT SLA’s, policies and procedures.

• Ensure that systems sufficiently and consistently perform and fulfill current and future needs.

• Fulfill third level escalation for Security issues and incidents and subsequent documentation.

• Ensure smooth implementation of new security applications and changes to the systems through sound testing procedures, capacity planning and impact analyses.

• Create, maintain, document, and communicate security policies and procedures for corporate, restaurant, and mobile systems.

• Stay current on trends and technological innovations to keep all systems current and as cost effective as possible. 

WHAT YOU’LL BRING TO THE TABLE

• Bachelor's Degree (BA/BS) from 4-year college or university preferred. 

• 5+ years of professional experience in cybersecurity, with a deep background in application security, data encryption, and compliance with security standards, as well as knowledge of network and cloud security.

• Expertise in explaining complex security challenges and solutions to both technical and non-technical leadership.

• Proven ability to build strong relationships and influence engineers across teams.

• Experience in software and infrastructure with a focus on security.

• Extensive experience with common code and network vulnerabilities, their impacts, and remediation strategies.

• Background in writing code in at least one programming language, such as Golang or C#, and a scripting language like Bash or Python.

• Applied knowledge of cryptography, PKI, TLS, and practical implementations.

PAY TRANSPARENCY

A reasonable estimate of the current base pay range for this position is $131,000.00–$183,500.00. You are also eligible for annual cash bonuses and equity awards based upon performance and other factors. Actual compensation offered may vary depending on skill level, experience, and/or education. Chipotle offers a competitive total rewards package, which includes medical, dental, and vision insurance, 401k, sick leave, vacation time, and much more. Visit https://jobs.chipotle.com/benefits for more details.

WHO WE ARE

Chipotle Mexican Grill, Inc. (NYSE: CMG) is cultivating a better world by serving responsibly sourced, classically cooked, real food with wholesome ingredients without artificial colors, flavors or preservatives. Chipotle has restaurants in the United States, Canada, the United Kingdom, France and Germany and is the only restaurant company of its size that owns and operates all its restaurants in North America and Europe. With employees passionate about providing a great guest experience, Chipotle is a longtime leader and innovator in the food industry. Chipotle is committed to making its food more accessible to everyone while continuing to be a brand with a demonstrated purpose as it leads the way in digital, technology and sustainable business practices. For more information or to place an order online, visit WWW.CHIPOTLE.COM

Chipotle Mexican Grill is an equal opportunity employer that values diversity at all levels. As a people-first company rooted in values, our purpose extends beyond serving nutritious food using real ingredients. It means hiring world-class individuals and fostering a culture that champions diversity, ensures equity, and celebrates inclusion. All qualified applicants, regardless of personal characteristics, are encouraged to apply.  

Qualified applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and/or certain state or local laws. Please contact [email protected] if you need an accommodation due to a disability to complete an application, job interview, and/or to otherwise participate in the hiring process. This email does not respond to non-accommodations related requests.