Sr Info Security Engineer

Job Description:

Role Overview The Senior Information Security Engineer will be a part of Cboe’s Security Engineering and Operations Team to manage, deploy and configure various information security technologies including;
Security Incident and Event Management (SIEM), Security Orchestration and Automation Response (SOAR / Case Management), Endpoint Detection and Response (EDR), Secure Email Gateways, and Email and Endpoint Data Loss Prevention (DLP) to provide optimal security controls across multiple business environments. This role is not limited to a single tool or domain. Instead, the Senior Engineer owns multiple platforms and end-to-end security capabilities, establishing reference architectures, engineering standards, and scalable design patterns that guide engineering teams across the organization.

This individual will be required to perform tuning of security solutions, manage applying patches and performing upgrades to various security platforms. The ideal candidate must be well versed in understanding the IT landscape including security, infrastructure, network, client, server, emerging technology standards and trends and will be involved in strategy, design, and engineering to contribute to the development of secure solutions.

Your responsibilities will be:
Provide expert recommendations and best practices to security managers, technical managers, and stakeholders including legal and regulatory teams.

Design, implement, and govern comprehensive security solutions across multiple platforms utilizing a variety of security tools, programming languages, and services, operating with near-complete autonomy. Develop, implement, and monitor comprehensive security solutions utilizing a variety of security tools, programming languages, and services with minimal supervision required. Automate repetitive tasks to enhance efficiency and scalability of security operations. Normalize and integrate diverse technologies to streamline analysis and response capabilities.

Document, educate and mentor team members on the use of complex security products and services. Identify and assess risks within the organization’s security posture and provide detailed recommendations for potential solutions. Innovate and create new methodologies to resolve existing production security issues. Evaluate emerging technologies and assess their relevance and potential impact on our security posture. Continuously assess and test the effectiveness of security controls and recommend improvements.

Act as a senior-level technical resource within the security team, providing guidance and mentorship to junior team members. Collaborate with cross-functional teams to integrate security into the development lifecycle and operational processes. Assist with security assessments and audits, ensuring compliance with internal policies and external regulations. Assist with escalated incident response activities, including containment, investigation, and recovery efforts. Stay current with industry trends, security standards, and best practices to ensure our systems remain secure against evolving threats.

The ideal candidate has Proven senior-level experience (minimum 5 years) in information security or 3 years information security experience with an additional to 2-3 years IT experience (System Administration, Network Administration), with a strong focus on engineering and operations.  Experience and knowledge on current security technologies (Databahn, NXlog, Google Secops, Bindplane, ProofPoint) Proficiency in scripting and automation for security operations.

Experience with Linux/Unix and Windows administration, including Active Directory (AD) and EntraID. Proficiency with the Microsoft Security Stack (Defender for…