Security Operations Engineer

Auberge Collection is a portfolio of extraordinary hotels, resorts, safaris, residences, and private clubs. While each property is unique, all share a crafted approach to luxury and bring the soul of the locale to life through captivating design, exceptional cuisine, innovative wellbeing, and gracious yet unobtrusive service. With 39 one-of-a-kind hotels, resorts, safaris, and residences, Auberge invites guests to create unforgettable stories in some of the world’s most desirable destinations. Auberge Collection is seeking a Security Operations Engineer to operate and improve security tools and response practices across Home Office, cloud and hotel environments. The role leads technical incident response, advances vulnerability remediation, oversees managed security provider performance, and supports security controls and audit readiness. Based in Bethesda, this role partners with Technology, Regional IT, property teams and external providers. The MSSP provides contracted monitoring and coverage; this role owns Auberge’s internal technical escalation and response. It does not require solo, continuous 24×7 monitoring. Key responsibilities Security platforms and operations - Responsible for the effectiveness and lifecycle of Auberge’s security tools—including SIEM, EDR, vulnerability management, identity, email, DLP and cloud security—directly or in partnership with third-party providers. - Strengthen security monitoring across Home Office and hotel environments by improving data visibility, alert accuracy, system integrations, response playbooks and control coverage. - Partner with platform owners to maintain secure configurations and current access controls, oversee privileged account management, and keep architecture and integration documentation accurate and up to date. - Identify capability gaps and recommend practical improvements to the Director of Cybersecurity. Incident response and vulnerabilities - Investigate and lead technical response to phishing, malware, account compromise, unauthorized access, data exposure and other incidents. - Coordinate containment, recovery, evidence, communications and post-incident reviews with the Director, MSSP, Regional IT, property leaders and affected teams. - Escalate high-severity incidents promptly and support the designated incident leader. - Prioritize vulnerabilities by risk, assign remediation, manage exceptions, validate fixes and report progress. - Identify recurring incidents and control weaknesses, and drive corrective actions with accountable owners. Provider oversight and hotel security - Coordinate MSSP delivery, including alert quality, escalation paths, playbooks, service levels and improvement plans; raise coverage gaps and unresolved risks. - Provide an escalation path for Regional IT and properties, coordinating response through established operating structures. - Maintain practical hotel security scorecards and review material risks and corrective actions with Technology and property leaders. - Support PCI and privacy assessments with technical evidence, control testing and remediation of assigned findings. - Review security needs for cloud, applications, integrations, major changes and property openings; maintain procedures and technical documentation. Automation and AI-enabled workflows - Build security-focused scripts, integrations and workflows for alert enrichment, investigation, phishing analysis, vulnerability prioritization, case documentation and reporting. - Apply least privilege, secure credential handling, data minimization, audit logging and human review; test accuracy, reliability and operational value. - Keep consequential actions, including containment, access changes and external communications, within approved authorization and escalation controls. - Partner with Enterprise Data & AI and AI Engineering when workflows require shared AI services, governed data access or production applications. Required qualifications - Five or more years in security operations, security engineering, incident response or a related field. - Hands-on experience administering or improving SIEM, EDR, vulnerability, identity, cloud security or similar platforms. - Experience investigating incidents, coordinating technical response, managing vulnerability remediation and working with managed security providers. - Working knowledge of security controls, audit evidence, identity and access, least privilege, endpoint and cloud security, and data protection. - Practical scripting or automation experience with APIs, workflow tools, Python, PowerShell, JavaScript or similar. - Clear risk communication, documentation and collaboration skills across distributed technical and hotel operations teams. - Sound judgment in evaluating AI-generated information before consequential action. Preferred qualifications - Experience in hospitality, retail or another multi-site environment. - Experience with security automation, SOAR, AI-enabled workflows or agentic systems. - Familiarity with PCI DSS, privacy requirements, NIST Cybersecurity Framework, MITRE ATT&CK or OWASP guidance for LLMs and agentic applications. - Experience with security dashboards, risk scorecards or executive reporting. - CISSP, GCIH, GCIA, Security+ or equivalent practical experience. Auberge Collection is a portfolio of extraordinary hotels, resorts, residences, and private clubs. While each property is unique, all share a crafted approach to luxury and bring the soul of the locale to life through captivating design, exceptional cuisine and spas, and gracious yet unobtrusive service. With hotels and resorts across three continents, Auberge invites guests to create unforgettable stories in some of the world’s most desirable destinations. Please visit auberge.com to learn more about our Collection. Follow us on Instagram, TikTok, Linkedin, Facebook and Pinterest: @Auberge and #AlwaysAuberge. About Friedkin Friedkin is a privately held family of global brands spanning automotive, entertainment, hospitality, investments, and sports. Founded in 1969 and headquartered in Houston, Texas, the company is led by Chief Executive Dan Friedkin, and united by a mission to build breakthrough brands that redefine the status quo. The Friedkin portfolio includes Gulf States Toyota, 30WEST, Accelerated Solutions Group, AS Roma, Ascent Automotive Group, Auberge Collection, Congaree, Copilot Capital, Diamond Creek, Everton Football Club, GSFSGroup, Imperative Entertainment, Legendary Expeditions, NEON, Northside Lexus, Pursuit Sports, The Friedkin Group International, USAL and Westside Lexus. For more information, please visit www.friedkin.com Auberge Collection LLC is an Equal Opportunity Employer, M/F/D/V. Auberge Collection LLC provides equal employment opportunities (EEO) to all team members and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, Auberge Collection LLC complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.