Senior Security Engineer

Job Title: Senior Security Engineer

Location: Naperville, IL (Hybrid)

Employment Type: Contract

Client: Direct Client

Key Responsibilities

Security Architecture & Infrastructure Hardening

• Configure, harden, and maintain security controls across enterprise endpoints, servers, operating systems (Windows/Linux), and network infrastructure (firewalls, routers, VPNs).
• Enforce Zero Trust principles, micro-segmentation, and secure access configurations.
• Implement and manage Identity and Access Management (IAM), SSO, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.

Threat Detection, Monitoring & Incident Response

• Manage, configure, and fine-tune SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Datadog) to collect logs, correlate events, and eliminate alert fatigue.
• Deploy, administer, and respond to alerts from Endpoint Detection and Response (EDR/XDR) platforms (e.g., CrowdStrike, SentinelOne, Defender for Endpoint).
• Act as a core member of the Computer Security Incident Response Team (CSIRT), performing triage, forensic artifact collection, root cause analysis, and containment.

Vulnerability Management & Cloud Security

• Schedule, execute, and analyze automated vulnerability scans across networks, hosts, and web applications using tools like Tenable Nessus, Qualys, or Rapid7.
• Partner with IT and development teams to track, prioritize, and validate remediation workflows against known CVEs.
• Monitor cloud infrastructure security posture (CSPM) in AWS, Azure, or Google Cloud Platform, identifying misconfigurations, overly permissive IAM policies, and unencrypted data stores.

Automation & Operational Support

• Write scripts in Python, PowerShell, or Bash to automate routine security checks, alert enrichment, and configuration audits.
• Assist in evaluating third-party vendor risks and answering technical security questionnaires for client audits.
• Support ongoing compliance readiness initiatives (e.g., SOC 2 Type II, ISO 27001, NIST CSF).

Required Qualifications

• Experience: 4–7+ years of hands-on technical experience in information security, network security, or security operations (SOC).
• System & Network Security: Deep working knowledge of TCP/IP networking, routing, firewalls (Palo Alto, Fortinet, Cisco), DNS security, and TLS/SSL certificates.
• Tooling Proficiency: Direct engineering experience with SIEM platforms (Splunk/Sentinel), EDR tools (CrowdStrike/Defender), and vulnerability assessment suites.
• Cloud Security: Practical experience securing at least one major cloud provider (AWS, Microsoft Azure, or Google Cloud Platform).
• Scripting: Solid scripting ability using Python, PowerShell, or Bash for automation and log analysis.
• Incident Handling: Demonstrable experience investigating active security alerts, malware analysis, and phishing triage.
• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent technical experience.

Preferred Qualifications

• Relevant industry certifications: CompTIA Security+, CySA+, CEH, GIAC (GSECEDIH), AWS/Azure Security Specialty, or SSCP.
• Experience integrating security scanning (SAST/DAST/SCA) into CI/CD build pipelines.
• Familiarity with enterprise SaaS security controls (e.g., Microsoft 365, Google Workspace, Salesforce).