Principal Security Engineer

Overview

At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting‑edge trading, clearing and investment solutions to market participants around the world.

Cboe HQ is located in the historic Old Post Office district, a landmark that blends classic architecture with modern amenities. The building features expansive spaces with high ceilings and large windows, offering an abundance of natural light and panoramic views of the city skyline and the Chicago River. With its prime location in the heart of downtown, the OPO Building provides easy access to major transportation hubs, including Union Station and multiple CTA lines, making it convenient for commuters.

The building is home to a variety of amenities, including restaurants, a fitness center, and collaborative work spaces, creating a vibrant and dynamic work environment in one of Chicago’s most iconic areas.

The Principal Information Security Engineer is a senior member of Cboe’s Security Engineering team, responsible for defining and driving the enterprise‑wide security architecture, strategy, and long‑term technical direction across a broad portfolio of security technologies. This includes Security Incident and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), endpoint detection and response (EDR), secure email gateways and data loss prevention (DLP) solutions across endpoint and email environments.

The role owns multiple platforms and end‑to‑end security capabilities, establishing reference architectures, engineering standards, and scalable design patterns that guide engineering teams across the organization. It operates with a high degree of autonomy and influences the overall security posture and risk profile of Cboe.

• Serve as a recognized technical authority across IT, Security, and Leadership, translating complex technical risk into clear business and regulatory context for executives, security leaders, and stakeholders including legal and regulatory teams.
• Design, implement, and govern comprehensive security solutions across multiple platforms utilizing a variety of security tools, programming languages, and services, operating with near‑complete autonomy.
• Design automation and engineering patterns that enhance the efficiency, scalability, and durability of security operations enterprise‑wide.
• Define how diverse technologies are normalized and integrated end‑to‑end to streamline analysis and response capabilities across environments.
• Mentor senior and junior engineers as a technical role model, and document the standards and engineering patterns governing complex security products and services.
• Identify systemic risk across the organization’s security posture and design enterprise‑wide mitigations and remediation strategies.
• Introduce new methodologies, reference architectures, and operating models to resolve systemic security challenges and advance the security program.
• Lead enterprise technology evaluations and adoption decisions, assessing the relevance and long‑term impact of emerging technologies on our security posture.
• Define, own, and enforce engineering standards, continuously assessing the effectiveness of security controls and driving improvements across the enterprise.
• Shape and drive the security engineering strategy and roadmap, influencing senior engineers and leaders across organizations.
• Partner with and influence cross‑functional teams to embed security into the development lifecycle and operational processes.
• Lead security assessments and audits, ensuring compliance with internal policies and external regulations.
• Lead the technical response for the highest‑severity incidents, directing containment, investigation, and recovery efforts.
• Stay at the forefront of industry trends, security standards, and best practices, ensuring Cboe’s systems remain resilient against evolving threats.

• Proven principal‑level experience (minimum 10…