Auberge Collection is seeking a Security Operations Engineer to operate and improve security tools and response practices across Home Office, cloud and hotel environments. The role leads technical incident response, advances vulnerability remediation, oversees managed security provider performance, and supports security controls and audit readiness.Based in Bethesda, this role partners with Technology, Regional IT, property teams and external providers. The MSSP provides contracted monitoring and coverage; this role owns Auberge’s internal technical escalation and response. It does not require solo, continuous 24×7 monitoring.Key responsibilitiesSecurity platforms and operationsResponsible for the effectiveness and lifecycle of Auberge’s security tools—including SIEM, EDR, vulnerability management, identity, email, DLP and cloud security—directly or in partnership with third-party providers.Strengthen security monitoring across Home Office and hotel environments by improving data visibility, alert accuracy, system integrations, response playbooks and control coverage.Partner with platform owners to maintain secure configurations and current access controls, oversee privileged account management, and keep architecture and integration documentation accurate and up to date.Identify capability gaps and recommend practical improvements to the Director of Cybersecurity.Incident response and vulnerabilitiesInvestigate and lead technical response to phishing, malware, account compromise, unauthorized access, data exposure and other incidents.Coordinate containment, recovery, evidence, communications and post-incident reviews with the Director, MSSP, Regional IT, property leaders and affected teams.Escalate high-severity incidents promptly and support the designated incident leader.Prioritize vulnerabilities by risk, assign remediation, manage exceptions, validate fixes and report progress.Identify recurring incidents and control weaknesses, and drive corrective actions with accountable owners.Provider oversight and hotel securityCoordinate MSSP delivery, including alert quality, escalation paths, playbooks, service levels and improvement plans; raise coverage gaps and unresolved risks.Provide an escalation path for Regional IT and properties, coordinating response through established operating structures.Maintain practical hotel security scorecards and review material risks and corrective actions with Technology and property leaders.Support PCI and privacy assessments with technical evidence, control testing and remediation of assigned findings.Review security needs for cloud, applications, integrations, major changes and property openings; maintain procedures and technical documentation.Automation and AI-enabled workflowsBuild security-focused scripts, integrations and workflows for alert enrichment, investigation, phishing analysis, vulnerability prioritization, case documentation and reporting.Apply least privilege, secure credential handling, data minimization, audit logging and human review; test accuracy, reliability and operational value.Keep consequential actions, including containment, access changes and external communications, within approved authorization and escalation controls.Partner with Enterprise Data & AI and AI Engineering when workflows require shared AI services, governed data access or production applications.