KERING Cybersecurity Engineer

We are currently looking for a Cybersecurity Engineer to join our Americas regional cybersecurity team. The role will operate in close collaboration with AMER Technology teams, local business functions, the global Company CERT, the Group PCI DSS program, and the cybersecurity teams of our brands. This is a hands-on role combining operational security, incident response, compliance, technical coordination, and continuous improvement in a complex, international, and highly distributed environment. Your Opportunity: As AMER Cybersecurity Engineer, you will play a key role in strengthening cybersecurity operations across the Americas. You will contribute to incident response activities as a virtual member of the global Company CERT, providing regional coverage, technical expertise, and coordination during cybersecurity incidents. You will also contribute to the global PCI DSS compliance program, coordinating local US compliance activities and supporting the security and compliance of stores, call centers, and e-commerce platforms operated by different brands across the Group.

Required Experience and Skills

Ideally, you hold a Bachelor’s or Master’s degree with a specialization in cybersecurity, information systems, networks, or software development.
You have solid experience in cybersecurity detection and incident response, ideally gained within a SOC, CSIRT or CERT environment, and are comfortable handling complex investigations with a high degree of autonomy.
You have strong knowledge of security monitoring and investigation technologies, including SIEM and EDR, and a good understanding of Windows, Linux, network and cloud environments. Experience with scripting languages such as Python or PowerShell, Bash and the ability to automate investigation or response activities are strong assets.
You combine strong analytical and problem-solving skills with a structured approach to incident handling. You are comfortable working in an international environment, communicating technical findings clearly and collaborating with teams across different functions and regions.
Previous exposure to PCI DSS, payment environments, retail technology, call centers, or e-commerce platforms would be a strong advantage.
You are comfortable working across multiple brands, entities, technical environments, and time zones within a global organization.

Technical Expertise

Strong understanding of cybersecurity incident-response processes, including detection, analysis, containment, eradication, recovery, and post-incident review.
Experience investigating incidents using SIEM, EDR/XDR, network-security, cloud-security, threat-intelligence, and logging solutions.
Strong understanding of networks, protocols, systems, applications, identities, and security architectures.
Understanding of key cybersecurity controls applicable to corporate, retail, payment, cloud, and e-commerce environments.
Knowledge of PCI DSS requirements and payment-card environments, or the ability to rapidly develop expertise in these areas.
Experience in vulnerability management, technical remediation, security testing, or audit-action-plan management.
Ability to analyze structured and unstructured information and translate technical findings into actionable recommendations.
Ability to develop integrations, scripts, queries, or automation supporting security operations and compliance activities would be an advantage.

Expected Qualities

2 years of experience in Cybersecurity engineering
Passionate about cybersecurity and technology, with strong curiosity and a continuous-learning mindset.
Hands-on, pragmatic, and comfortable taking ownership of operational topics.
Able to remain calm, structured, and effective during cybersecurity incidents or high-pressure situations.
Strong analytical, problem-solving, and organizational skills.
Excellent written and verbal communication skills.
Able to communicate technical and compliance topics clearly to both technical and non-technical stakeholders.
Comfortable working in a matrixed, multicultural, and international organization.
Collaborative, service-oriented, and able to build trusted relationships with brands, Technology teams, and global functions.
Capable of managing multiple priorities while maintaining strong attention to detail.
Professional certifications: Microsoft, Linux, cloud, CISSP, CISM, or CEH.
Penetration testing certifications: CEH, GXPN, or GPEN.