Senior Security Engineer

Swisher stands at the forefront of innovation in the consumer products industry, blending a legacy of excellence with a forward-thinking approach. Established in 1861, the family-owned company has evolved into a trailblazer, renowned for its iconic Swisher Sweets cigars, cutting-edge American-made Rogue and Ammo modern oral nicotine products, and the premium Drew Estate cigar collection, which features ACID, Liga Privada, and Undercrown. Poised for the future, Swisher is redefining traditional categories with Volt+Co -home to groundbreaking products such as Mojo Energy Pouches. Swisher is also home to more than two dozen American-made, non-combustible tobacco brands under the Helme Tobacco Co. umbrella. Based in Jacksonville, Florida, with operations spanning the U.S., the Dominican Republic, and Nicaragua, Swisher continues to lead through innovation, setting new benchmarks in quality and creativity. Learn more at swisher.com.

The Senior Security Engineer is responsible for designing and implementing security strategies that meet the business's needs. You will focus on designing, implementing, and managing comprehensive security solutions to protect systems, data, and applications from cyber threats.

• →Responsible for the design, deployment, and support of secure systems aligned with business objectives and regulatory compliance
• →Responsible for developing, implementing, and maintaining security policies, standards, and best practices to maintain compliance and improve overall security posture
• →Responsible for architecture development, build, and supporting the security infrastructure to detect and respond to threats including security information and event management (SIEM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs
• →Responsible for managing security systems, including provisioning, monitoring, and incident response
• →Responsible for providing on-call support to address production incidents or issues that occur outside of normal business hours
• →Proactively research emerging threats, evaluate and pilot mitigation technologies, and collaborate with engineering teams to seamlessly deploy these protections into production
• →Continuously improve security posture through infrastructure management, threat analysis, and vulnerability mitigation
• →Collaborate with business leaders, project managers, and technical teams to ensure security considerations are factored into all technology projects
• →Responsible for performing system patching, maintenance, and administration, as necessary

• Bachelor’s degree in Cyber Security, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study
• 5+ years of related IT experience
• Knowledge of cybersecurity frameworks
• Demonstrated experience with encryption, system and network security, cloud security, and identity management
• Strong understanding of security tools (e.g. SIEM systems, firewalls, anti-malware)
• Working knowledge of cloud platforms (e.g. AWS, Azure, Google Cloud)
• Experience with security assessment methods and penetration testing techniques
• Demonstrated experience in identifying risk and development of mitigation plans
• Knowledge of security related legislation/regulations with emphasis on PCI and Privacy
• Strong problem solving skills with an ability to develop creative alternatives to complex problems, as well as continuous improvement process skills
• Demonstrated professional written, verbal, and presentation communications skills
• Proven ability to work effectively in a fast-paced environment as part of a high performance team
• Security accreditation (e.g., CISSP, GCIH, CISM, etc.)

• Master's degree in Computer Science, Information Security, Cybersecurity, or a related field
• Experience in developing and delivering security awareness training
• Major cloud provider platform certification (e.g. AWS Solution Architect, Google Cloud Engineer, Microsoft Solution Architect, etc.)
• Proficiency in scripting languages

• Email: All official emails will come from an @Swisher.com address
• Website: Verify job listings and contact details on https://careers.swisher.com
• Phone: Call our main number listed on Swisher.com for verification

Important: We will never contact you via Teams, Zoom, or Google Meets. If you qualify for an interview, the proper meeting method will be shared with you beforehand. Confidential information should only be shared through secure methods outside of email