Engineer, Information Security

Innovate in Bengaluru

This position is based at our on-site office in Bengaluru. Lowe's offers an ultramodern work environment, complete with cutting-edge technology, collaborative workspaces, an on-site gym and clinic, and other perks to enhance your work experience. 

About Lowe's

Lowe’s is a FORTUNE® 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe’s operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

Lowe’s India, the Global Capability Center of Lowe’s Companies Inc., is a hub for driving our technology, business, analytics, and shared services strategy. Based in Bengaluru with over 4,500 associates, it powers innovations across omnichannel retail, AI/ML, enterprise architecture, supply chain, and customer experience. From supporting and launching homegrown solutions to fostering innovation through its Catalyze platform, Lowe’s India plays a pivotal role in transforming home improvement retail while upholding strong commitment to social impact and sustainability. For more information, visit Lowes India

Job Summery

The primary purpose of this role is to implement, support and enhance enterprise data protection capabilities, including Data Security Posture Management (DSPM), enterprise encryption, key management, and web application security controls. The role requires hands-on technical expertise to troubleshoot complex security engineering issues, support security projects, integrate enterprise security solutions, and continuously improve operational processes.

The ideal candidate has a strong foundation in information security, enterprise infrastructure, and security engineering, with experience supporting data protection technologies and implementing security controls in large-scale enterprise environments.

Core Responsibilities:

• Serve as a Hands-on subject matter expert for Data Security Posture Management, Enterprise Encryption, and Key Management Solutions.
• Assist with the implementation and operation of Data Security Posture Management (DSPM) solutions to discover, classify, and monitor sensitive data across enterprise environments.
• Analyze DSPM findings and partner with data owners to remediate data exposure risks, excessive permissions, policy violations, and compliance gaps.
• Support data discovery, classification, and protection initiatives to improve visibility into sensitive and regulated data assets.
• Monitor encryption, key management, and DSPM platforms to identify operational issues, security events, and potential areas of risk.
• Assist with security assessments and validation of applications, databases, and platforms requiring encryption or sensitive data protection controls.
• Collaborate with application, infrastructure, cloud, and database teams to integrate encryption and key management capabilities into enterprise solutions.
• Support onboarding and maintenance of enterprise security tools related to cryptographic services, data protection, data governance, and information security.
• Document operational procedures, technical standards, implementation guidance, and support runbooks for encryption and data security solutions.
• Provide technical support for projects requiring encryption, tokenization, key management, data protection, or sensitive data handling requirements.
• Stay informed on emerging trends, technologies, and threats related to cryptography, key management, data protection, and enterprise data security.
• Work with security, compliance, privacy, and risk teams to support regulatory and organizational requirements related to data protection and encryption controls. Deliver and resolve complex engineering problems spanning multiple applications to drive overall improvements in security across systems and applications
• Assist the Information Security team in monitoring and managing security systems and reviewing logs
• Respond to escalated security engineering issues for enterprise systems, facilitate and troubleshoot when necessary
• Serve a security engineering resource for project teams throughout the implementation and maintenance of assigned information security solutions, contribute to the definition and governance of security documentation (e.g. guidelines, processes, procedure)
• Flexible to work in shift (Morning/Afternoon)

Years of Experience:

• Overall 3 years of experience in IT, Software engineering or relative field.
• 2-3 years Information Security experience (or combination of Information Security and Application Development)

Education Qualification & Certifications (optional)

• Bachelors Degree in Computer Science, CIS, Engineering, Cybersecurity, or related field (or equivalent work experience in a related field)
• Relevant information security certifications (e.g. CEH, GPen)

Primary Skills (must have)

• Knowledge of information security practices and policies
• Knowledge of IT Infrastructure Library (ITIL) framework
• Knowledge of Data Security Posture Management solutions
• Experience in delivering security product deployments, integrations, and operational efforts

Secondary Skills (desired)

• Knowledge of Key Management Solutions
• Knowledge of Enterprise Encryption
• Experience facilitating vendor security product requests for engineering requirements, enhancements, maintenance, and configuration
• Familiarity with OWASP Top 10 and/or SANS Top 25
• Familiarity with retail regulatory scope (PCI, SOX, etc.)

Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.