IT Security Engineer II

Title:                IT Security Engineer II

Position:          Full-Time Direct Hire

Location:         Chicagoland Area (hybrid onsite 2 days per week)

*Hybrid onsite 2 days weekly will involve rotational visits to various Chicago suburbs including Skokie, Warrenville, Arlington Heights, and Elmhurst.

  Advance Your Career with a Leading Healthcare Organization!

TalentFish is casting a line for an IT Security Engineer II. This is an exciting opportunity to join a leading healthcare organization where you'll play a critical role in protecting enterprise systems, cloud environments, applications, and sensitive data from evolving cyber threats.

As IT Security Engineer II, you'll help strengthen the organization's cybersecurity posture by designing and implementing enterprise security solutions, leading incident response activities, managing advanced security technologies, and driving security strategy across the organization. This role offers the opportunity to work with modern cloud and security platforms while partnering with infrastructure, application, and business teams to continuously improve security operations.

If you're passionate about cybersecurity, cloud security, automation, and protecting enterprise environments from today's evolving threats, we welcome you to apply!

What You’ll Bring:

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline (or equivalent combination of education and experience).
• Minimum 3+ years of cybersecurity experience as a Security Analyst or Security Engineer.
• Experience administering and supporting enterprise security applications such as Vulnerability Management, Privileged Access Management (PAM), SIEM, Endpoint Security, DLP, and Email Security platforms.
• Experience leading cybersecurity projects and cross-functional initiatives.
• Ability to independently manage multiple priorities with minimal supervision.
• Strong knowledge of cybersecurity principles, frameworks, and best practices.
• Experience designing and implementing enterprise security solutions.
• Advanced incident investigation and threat analysis skills.
• Working knowledge of network, application, cloud, and infrastructure security.
• Excellent communication and stakeholder management skills.
• Strong project management and organizational abilities.
• A collaborative mindset with the ability to mentor others and influence security best practices.

Core Security Technology & Domain Experience

• Cloud Security:  Microsoft Azure, CSPM, CNAPP
• Security Operations:  SIEM, SOAR, Threat Detection & Exposure Management, Security Incident Response
• Endpoint Security:  EDR/XDR, Data Loss Prevention (DLP)
• Identity & Access Security:  Identity & Access Management (IAM), Privileged Access Management (PAM)
• Infrastructure Security:  Network, Server, Desktop, Database, Cloud & Application Security
• Vulnerability & Risk Management:  Vulnerability Management, Risk Assessments, Security Governance
• Enterprise Security:  Security Architecture, Enterprise Security Controls, Asset Inventory & Configuration Management
• System Security:  System Hardening, IDS/IPS

Preferred Qualifications

• Advanced, professional, or expert-level cybersecurity certification (CISSP, GIAC, CCSP, or similar).
• Healthcare industry experience or experience working within highly regulated environments.
• Experience administering and supporting one or more of the following enterprise security technologies is highly desired. Comparable technologies will also be considered.

• Data Loss Prevention: CrowdStrike Falcon, CrowdStrike DLP, or comparable EDR/DLP platforms
• Vulnerability Management: Tenable Security Center, Qualys
• Privileged Access Management (PAM): Delinea (or comparable PAM solutions such as CyberArk or BeyondTrust)
• Email Security: Proofpoint Email Protection (or comparable secure email gateway solutions)
• SIEM: Sumo Logic SIEM (or comparable SIEM solutions)

What You'll Do

• Lead complex cybersecurity incident investigations, response, and recovery efforts.
• Identify security threats and vulnerabilities and implement effective remediation strategies.
• Architect, design, implement, and enhance enterprise security technologies and processes.
• Administer, monitor, troubleshoot, and optimize multiple enterprise security platforms.
• Serve as the primary administrator and technical owner of the CrowdStrike DLP platform, including ongoing administration, policy management, optimization, troubleshooting, and enhancements to strengthen enterprise data protection.
• Drive automation of security operations to improve efficiency and reduce organizational risk.
• Develop and maintain enterprise security policies, standards, procedures, and operational documentation.
• Create both short- and long-term security technology roadmaps and business cases.
• Conduct security reviews, risk assessments, and impact analyses for new and existing systems.
• Develop, audit, and enhance enterprise security controls across on-premises and cloud environments.
• Measure and report on enterprise security capabilities using automated and manual tools.
• Collaborate with IT and business leaders to promote security awareness and best practices.
• Support internal and external audits, compliance initiatives, and regulatory assessments.
• Assist with HIPAA, PCI, NIST, and other security and compliance requirements.
• Cross-train team members and mentor peers on operational processes and security technologies.
• On-call participation in a rotating 24/7 schedule supporting enterprise security operations.

Why You'll Love This Opportunity!

• Enjoy a hybrid work environment of 2 days onsite and 3 days working from home.
• Opportunity to work with modern cloud and cybersecurity technologies.
• High-impact role protecting critical healthcare infrastructure.
• Collaborative, innovative IT security team.
• Full comprehensive employee benefits package including Medical, Dental, Vision, and Pet Insurance, Health Savings Account (HSA), Retirement Plan with Company Match, Paid Time Off & Paid Holidays, Tuition Reimbursement, Wellness Programs and more!
• Professional development and career growth opportunities.

Compensation and Employment
This role requires authorization to work in the U.S. without current or future visa sponsorship. The expected salary for this position is $90,000 – $125,000 depending on experience and qualifications. This role qualifies for comprehensive benefits such as health insurance, 401(k), paid time off and more. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations. All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on company background check policies and applicable laws.
TalentFish is an employee-owned company pioneering a new realm in talent acquisition. We are redefining IT staffing by evolving AI, video screening, and our unique platform. TalentFish focuses on providing the best employee, consultant, and client experience possible. At TalentFish we are an Equal Opportunity Employer; we embrace and encourage diversity.