Kering Cybersecurity Engineer

About Kering

Kering is a global luxury group renowned for nurturing some of the world’s most influential Houses in fashion, leather goods, jewelry, and eyewear, including Gucci, Saint Laurent, Bottega Veneta, Balenciaga, and Boucheron. As an employer, Kering offers a distinctive environment where creative excellence, entrepreneurial spirit, and long-term sustainability converge. The Group empowers its talents to shape the future of luxury through innovation, craftsmanship, and responsible business practices. With an international culture grounded in diversity, inclusion, and shared ambition, Kering provides meaningful career opportunities for professionals seeking to contribute to exceptional brands while advancing a more sustainable and imaginative luxury industry.

Role & Responsibilities

• Serve as the AMER cybersecurity point of contact for identifying, analyzing, containing, remediating, and following up on cybersecurity incidents.
• Operate as a virtual member of the global Company CERT and contribute to incident response during AMER business hours.
• Coordinate incident resolution with local Technology teams, brand cybersecurity teams, infrastructure and application teams, external providers, and global cybersecurity functions.
• Conduct technical investigations using available security tools, logs, threat intelligence, and digital evidence.
• Support crisis management during major cybersecurity incidents and contribute to operational and executive reporting.
• Develop, test, and continuously improve incident-response procedures, playbooks, escalation processes, and communication mechanisms.
• Contribute to lessons-learned exercises and ensure corrective and remediation actions are identified, assigned, and monitored.
• Support vulnerability-management and technical-remediation activities with global and regional security teams.
• Contribute to the global PCI DSS program, particularly across AMER and US operations.
• Coordinate local PCI DSS compliance activities with Technology teams, business stakeholders, brands, assessors, acquirers, and external service providers.
• Support PCI DSS compliance for stores, retail payment environments, call centers, e-commerce platforms, and supporting infrastructure.
• Assist brands and technical teams with defining PCI DSS scope, identifying payment-data flows, maintaining inventories, and clarifying control responsibilities.
• Collect, review, and maintain compliance evidence, technical documentation, procedures, and control records.
• Contribute to PCI DSS assessments, internal reviews, external audits, penetration tests, vulnerability scans, and remediation plans.
• Monitor compliance gaps and coordinate the implementation and closure of corrective actions.
• Support harmonization and continuous improvement of PCI DSS controls across brands, platforms, and business models.
• Report regularly on compliance status, risks, remediation progress, and areas requiring management attention.
• Provide security guidance to IT and business project teams, particularly for payment, retail, call-center, and e-commerce initiatives.
• Contribute to technical cybersecurity programs delivered as part of the Group cybersecurity transformation.
• Support security assessments and advise on secure architecture and appropriate technical controls.
• Help industrialize recurring security, compliance, evidence-collection, and remediation activities.
• Contribute to internal and external audits and monitor associated action plans.
• Identify opportunities for automation, integration, and process improvement across security operations and PCI DSS compliance.
• Produce clear operational, technical, compliance, and management-level reports.

Qualifications

• Ideally, a bachelor's or master's degree specializing in cybersecurity, information systems, networks, or software development.
• Solid experience in cybersecurity detection and incident response, ideally in a SOC, CSIRT, or CERT environment, with the ability to handle complex investigations autonomously.
• Strong knowledge of security monitoring and investigation technologies, including SIEM and EDR, and a good understanding of Windows, Linux, network, and cloud environments.
• Experience with scripting languages such as Python or PowerShell and Bash, and the ability to automate investigation or response activities, are strong assets.
• Strong analytical and problem-solving skills, with a structured approach to incident handling.
• Ability to communicate technical findings clearly and collaborate across functions and regions in an international environment.
• Previous exposure to PCI DSS, payment environments, retail technology, call centers, or e-commerce platforms is a strong advantage.
• Comfort working across multiple brands, entities, technical environments, and time zones within a global organization.
• Strong understanding of cybersecurity incident-response processes, including detection, analysis, containment, eradication, recovery, and post-incident review.
• Experience investigating incidents using SIEM, EDR/XDR, network-security, cloud-security, threat-intelligence, and logging solutions.
• Strong understanding of networks, protocols, systems, applications, identities, and security architectures.
• Understanding of key cybersecurity controls applicable to corporate, retail, payment, cloud, and e-commerce environments.
• Knowledge of PCI DSS requirements and payment-card environments, or the ability to rapidly develop expertise in these areas.
• Experience in vulnerability management, technical remediation, security testing, or audit-action-plan management.
• Ability to analyze structured and unstructured information and translate technical findings into actionable recommendations.
• Ability to develop integrations, scripts, queries, or automation supporting security operations and compliance activities is an advantage.
• 2 years of experience in cybersecurity engineering.
• Passion for cybersecurity and technology, with strong curiosity and a continuous-learning mindset.
• Hands-on and pragmatic approach, with comfort taking ownership of operational topics.
• Ability to remain calm, structured, and effective during cybersecurity incidents or high-pressure situations.
• Strong analytical, problem-solving, and organizational skills.
• Excellent written and verbal communication skills.
• Ability to explain technical and compliance topics clearly to technical and non-technical stakeholders.
• Comfort working in a matrixed, multicultural, and international organization.
• Collaborative, service-oriented approach and ability to build trusted relationships with brands, Technology teams, and global functions.
• Ability to manage multiple priorities while maintaining strong attention to detail.
• Professional certifications in Microsoft, Linux, cloud, CISSP, CISM, or CEH.
• Penetration-testing certifications such as CEH, GXPN, or GPEN.
• Fluent English is mandatory; additional languages used across the Group or AMER region are an advantage.

Skills

Experience

2 years of experience in cybersecurity engineering; solid experience in cybersecurity detection and incident response is also required.

Education

Ideally, a bachelor's or master's degree specializing in cybersecurity, information systems, networks, or software development.

Compensation

The base compensation for this position ranges from USD 135,000 to USD 145,000 per annum.

Benefits

Incentives; medical and prescription drug insurance, dental and vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing programs, Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, basic life and AD&D insurance, and short-term disability insurance.

Culture

Kering fosters a dynamic, purpose-driven culture where creativity, entrepreneurship, and collaboration support the distinct identities of its luxury Houses. As an employer, the Group places strong emphasis on sustainability, diversity, and talent development, encouraging people to innovate responsibly while contributing to the future of modern luxury.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.