Senior Cybersecurity Engineer

Job Title:

Senior Cybersecurity Engineer

Location:

Bloomingdale, Illinois (onsite 4 days per week)

Position:
Full-Time Direct Hire

Talent Fish is hiring a full-time Senior Security Engineer for our premier client in Bloomindale, IL. This key position will be onsite Monday - Thursday.

The Senior Cybersecurity Engineer will play a critical role in protecting enterprise information assets and advancing the organization's cybersecurity strategy.

This is a hands-on builder role within a growing security team. The ideal candidate will be a seasoned cybersecurity professional who enjoys solving complex security challenges, mentoring others, and staying ahead of evolving threats.

• The Senior Cybersecurity Engineer will write security playbooks, develop and tune threat detections, and design and implement security controls while providing technical leadership and mentoring junior team members.
• You will partner with IT leadership and business stakeholders to design, implement, and enhance security controls while leading incident response, vulnerability management, and security initiatives across both on-premises and cloud environments.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent combination of education and experience).
• 10 years of security-focused work and 9 years of progressive cybersecurity experience.
• CISSP, CISM, CASP , or a comparable security certification is preferred.
• Experience managing multiple security tickets and priorities while communicating effectively with stakeholders.
• Experience using network monitoring and analysis tools.
• Strong understanding of security risks across both on-premises and cloud environments.
• Ability to build relationships with business partners and platform owners to proactively identify and mitigate security risks.
• Comfortable working hands-on within a small, growing security team while also leading and mentoring junior staff.
• Playbook development
  :
  Hands-on experience in writing and maintaining security incident-response playbooks.
• Threat detection: Hands-on experience developing, tuning, or improving threat detections.
• Security implementation
  :
  Experience designing and personally implementing security controls not solely recommending or managing them.

• SIEM, Endpoint Detection & Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), firewalls, and secure web proxies
• Network Security and threat detection
• Patch management and vulnerability assessment / remediation
• Threat intelligence platforms and MITRE ATT&CK cybersecurity framework
• Penetration testing and threat-led penetration testing
• Attack simulations and Red Team / Blue Team exercises

• Collaborate with the Security team, IT leadership, business stakeholders, and executive leadership to develop and execute
  enterprise information security strategies
  .
• Protect the organization s on-premises and cloud systems, networks, and applications from security threats and cyberattacks.
• Serve as the
  technical lead during security incidents, coordinating containment, investigation, remediation, and documentation.
• Research emerging threat actors, malware, tactics, techniques, procedures (TTPs), and indicators of compromise (IoCs).
• Assess, monitor, prioritize, and report on security vulnerabilities across the environment.
• Analyze security metrics and reports to identify trends and strengthen the organization's overall security posture.
• Perform digital forensic analysis as needed.
• Assist in developing and maintaining security standards, policies, procedures, and best practices.
• Participate in IT projects to ensure security requirements are incorporated throughout the project lifecycle.
• Evaluate emerging cybersecurity technologies and recommend solutions that improve the organization's security posture.
• Mentor and provide technical guidance to Security and IT team members.
• Participate in an on-call rotation and provide occasional after-hours support.

This role requires authorization to work in the U.S. without current or future…