Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 hours agoWe saw it 34 min after it went up

Security Operations Engineer

Auberge Collection561 open roles

Where
Bethesda, MD, United States
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Operations EngineerAuberge Collection · Bethesda, MD, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Auberge Collection's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Auberge Collection postings stay open a median of 48 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 13 hours ago

Auberge Collection median: 48 days open

The posting

Company Description

Auberge Collection is a portfolio of extraordinary hotels, resorts, safaris, residences, and private clubs. While each property is unique, all share a crafted approach to luxury and bring the soul of the locale to life through captivating design, exceptional cuisine, innovative wellbeing, and gracious yet unobtrusive service. With 39 one-of-a-kind hotels, resorts, safaris, and residences, Auberge invites guests to create unforgettable stories in some of the world’s most desirable destinations.

Job Description

Auberge Collection is seeking a Security Operations Engineer to operate and improve security tools and response practices across Home Office, cloud and hotel environments. The role leads technical incident response, advances vulnerability remediation, oversees managed security provider performance, and supports security controls and audit readiness.

Based in Bethesda, this role partners with Technology, Regional IT, property teams and external providers. The MSSP provides contracted monitoring and coverage; this role owns Auberge’s internal technical escalation and response. It does not require solo, continuous 24×7 monitoring.

Key responsibilities

Security platforms and operations

  • Responsible for the effectiveness and lifecycle of Auberge’s security tools—including SIEM, EDR, vulnerability management, identity, email, DLP and cloud security—directly or in partnership with third-party providers.
  • Strengthen security monitoring across Home Office and hotel environments by improving data visibility, alert accuracy, system integrations, response playbooks and control coverage.
  • Partner with platform owners to maintain secure configurations and current access controls, oversee privileged account management, and keep architecture and integration documentation accurate and up to date.
  • Identify capability gaps and recommend practical improvements to the Director of Cybersecurity.

Incident response and vulnerabilities

  • Investigate and lead technical response to phishing, malware, account compromise, unauthorized access, data exposure and other incidents.
  • Coordinate containment, recovery, evidence, communications and post-incident reviews with the Director, MSSP, Regional IT, property leaders and affected teams.
  • Escalate high-severity incidents promptly and support the designated incident leader.
  • Prioritize vulnerabilities by risk, assign remediation, manage exceptions, validate fixes and report progress.
  • Identify recurring incidents and control weaknesses, and drive corrective actions with accountable owners.

Provider oversight and hotel security

  • Coordinate MSSP delivery, including alert quality, escalation paths, playbooks, service levels and improvement plans; raise coverage gaps and unresolved risks.
  • Provide an escalation path for Regional IT and properties, coordinating response through established operating structures.
  • Maintain practical hotel security scorecards and review material risks and corrective actions with Technology and property leaders.
  • Support PCI and privacy assessments with technical evidence, control testing and remediation of assigned findings.
  • Review security needs for cloud, applications, integrations, major changes and property openings; maintain procedures and technical documentation.

Automation and AI-enabled workflows

  • Build security-focused scripts, integrations and workflows for alert enrichment, investigation, phishing analysis, vulnerability prioritization, case documentation and reporting.
  • Apply least privilege, secure credential handling, data minimization, audit logging and human review; test accuracy, reliability and operational value.
  • Keep consequential actions, including containment, access changes and external communications, within approved authorization and escalation controls.
  • Partner with Enterprise Data & AI and AI Engineering when workflows require shared AI services, governed data access or production applications.

Qualifications

Required qualifications

  • Five or more years in security operations, security engineering, incident response or a related field.
  • Hands-on experience administering or improving SIEM, EDR, vulnerability, identity, cloud security or similar platforms.
  • Experience investigating incidents, coordinating technical response, managing vulnerability remediation and working with managed security providers.
  • Working knowledge of security controls, audit evidence, identity and access, least privilege, endpoint and cloud security, and data protection.
  • Practical scripting or automation experience with APIs, workflow tools, Python, PowerShell, JavaScript or similar.
  • Clear risk communication, documentation and collaboration skills across distributed technical and hotel operations teams.
  • Sound judgment in evaluating AI-generated information before consequential action.

Preferred qualifications

  • Experience in hospitality, retail or another multi-site environment.
  • Experience with security automation, SOAR, AI-enabled workflows or agentic systems.
  • Familiarity with PCI DSS, privacy requirements, NIST Cybersecurity Framework, MITRE ATT&CK or OWASP guidance for LLMs and agentic applications.
  • Experience with security dashboards, risk scorecards or executive reporting.
  • CISSP, GCIH, GCIA, Security+ or equivalent practical experience.

Additional Information

Auberge Collection is a portfolio of extraordinary hotels, resorts, residences, and private clubs. While each property is unique, all share a crafted approach to luxury and bring the soul of the locale to life through captivating design, exceptional cuisine and spas, and gracious yet unobtrusive service. With hotels and resorts across three continents, Auberge invites guests to create unforgettable stories in some of the world’s most desirable destinations. Please visit auberge.com to learn more about our Collection. Follow us on Instagram, TikTok, Linkedin, Facebook and Pinterest: @Auberge and #AlwaysAuberge.

About Friedkin

Friedkin is a privately held family of global brands spanning automotive, entertainment, hospitality, investments, and sports.

Founded in 1969 and headquartered in Houston, Texas, the company is led by Chief Executive Dan Friedkin, and united by a mission to build breakthrough brands that redefine the status quo.

The Friedkin portfolio includes Gulf States Toyota, 30WEST, Accelerated Solutions Group, AS Roma, Ascent Automotive Group, Auberge Collection, Congaree, Copilot Capital, Diamond Creek, Everton Football Club, GSFSGroup, Imperative Entertainment, Legendary Expeditions, NEON, Northside Lexus, Pursuit Sports, The Friedkin Group International, USAL and Westside Lexus.

For more information, please visit www.friedkin.com

Auberge Collection LLC is an Equal Opportunity Employer, M/F/D/V. Auberge Collection LLC provides equal employment opportunities (EEO) to all team members and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, Auberge Collection LLC complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Auberge Collection's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Auberge Collection's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Auberge Collection's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.