Information Security Engineer

Cooper’s Hawk Winery & Restaurants is building secure enterprise platforms that support hybrid operations across Azure, Oracle Cloud, Salesforce, and on-prem environments. This Information Security Engineer role focuses on protecting applications, cloud services, identity and access, and the tooling that helps keep business-critical systems resilient. The position is hybrid based in Downers Grove, IL, with a compensation range of USD 105,000 to 120,000 per year
.

You will help strengthen security across the stack, from secure configurations and defense tooling to Dev Sec Ops  integration and threat detection tuning, while collaborating with MDR and SOC teams during monitoring and incident response.

• Support the design, implementation, and maintenance of security controls across Cooper’s Hawk hybrid infrastructure, with emphasis on Microsoft Azure
  , Oracle Cloud (ERP, Simphony POS), and Salesforce Commerce Cloud
  , ensuring secure configurations and reduced attack surface.
• Develop and maintain secure configuration standards for cloud services, with a focus on Azure.
• Engineer and manage security tooling across cloud and on-prem, including Microsoft Defender for Endpoint
  , Defender for Identity
  , Cisco VPN
  , Meraki firewalls
  , and Cloudflare WAF
  .
• Embed security into the SDLC by integrating SAST
  , DAST
  , and SCA into Git Hub and CI/CD pipelines
  , supporting threat modeling and code reviews to improve secure coding and strengthen APIs and customer-facing applications.
• Administer and fine-tune Cloudflare WAF policies, bot mitigation, and access rules to help address OWASP Top 10 risks, credential stuffing, and scraping attempts.
• Support identity and access controls across Azure Entra and on-prem Active Directory
  , including Conditional Access Policies
  , RBAC
  , Just-In-Time (JIT) access
  , and MFA enforcement
  .
• Monitor and respond to threats by tuning detections, assisting investigations, and coordinating incident containment and recovery with MDR and SOC teams.
• Perform and support vulnerability assessments and penetration testing, prioritize remediation based on risk, and track findings to closure.
• Contribute to security programs such as PCI-DSS audits
  , NIST CSF 2.0 alignment, and cloud security posture improvements.
• Continuously research CVE activity and evolving TTPs to update defenses and detection rules.

• Bachelor’s degree in information security, Computer Science, or a related field, or equivalent practical experience.
• 3+ years of progressive experience in infrastructure and application security across hybrid (on-prem and cloud) environments.
• Technical experience with Windows Server and desktop platforms, including Active Directory and Entra , plus core networking fundamentals such as DNS
  , TCP/IP
  , VLANs
  , and VPNs
  .
• Experience with enterprise security tools covering areas such as EDR
  , IPS
  , IAM
  , DLP
  , and vulnerability management platforms.
• Knowledge of cloud security best practices with hands‑on experience securing services in Azure and/or AWS
  .
• Understanding of application security principles, including the OWASP Top 10
  , secure SDLC practices, and securing APIs and web applications.
• Familiarity with integrating security into Dev Ops pipelines and managing cloud-native security controls, including WAFs
  , API gateways
  , and bot protection
  .
• Familiarity with Salesforce security configurations and securing SaaS platforms.
• Experience with SIEM
  , IDS/IPS
  , endpoint protection, firewalls, and security monitoring.
• Knowledge of compliance and risk frameworks, including PCI-DSS
  , NIST CSF
  , and SOX/ITGC
  .
• Strong communication and collaboration skills across technical and business teams.

• Industry‑recognized security certifications (examples include CISSP
  , CISM
  , CRISC
  , CCSK
  , or relevant…