Lowe's Companies, Inc.
Engineer, Information Security (IAM/Cloud Security)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Lowe's Companies, Inc.
Lowe's Companies, Inc. is a prominent home improvement retailer, founded in 1921 in North Wilkesboro, North Carolina. Originally a small hardware store, it has grown to become the second-largest home improvement chain in the United States and the world's second-largest in the sector. The company has expanded significantly since its early days, with over 1,700 stores and approximately 300,000 associates today. Lowe's is headquartered in Mooresville, North Carolina, and has extended its reach internationally with stores in Canada and Mexico. Lowe's offers a wide variety of home improvement products, including hardware, building supplies, tools, appliances, and lawn and garden supplies. The stores are designed with large warehouse-style layouts, making it easy for customers to navigate. The company serves both professional contractors and DIY homeowners, providing specialized services and products to meet the needs of its diverse customer base.
Security at Lowe's Companies, Inc.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Lowe's AppSec philosophy centers on the paramount importance of protecting data and maintaining trust.
- Their mission is stated as: "Protecting the data and maintaining the trust of our customers, associates and business partners are of paramount importance to us." They integrate security into the development process by conducting "vulnerability testing during the software development life cycle." Furthermore, their risk strategy is guided by the National Institute of Standards and Technology (NIST) security frameworks.
Security Team
- The Lowe's CISO, Marc H.
- Varner, is "responsible for the company's global cybersecurity strategy" and reports to the Chief Digital and Information Officer (CDIO), Seemantini Godbole, who "leads the enterprise-wide global technology team." The security team includes roles such as Senior Engineer, Information Security, focused on developing software-driven security tools.
Key Initiatives
Lowe's active AppSec initiatives include conducting "vulnerability testing during the software development life cycle" and performing "regular vulnerability scanning." They also maintain an external intake process via HackerOne, where they "welcome security researchers to share details of any suspected vulnerabilities."
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.