Job Type: Full Time
Job Location: Lemont, Remote
Job Summary:
We are seeking a highly skilled Cyber Security Engineer to protect our systems, networks, and data from cyber threats. The ideal candidate will be responsible for identifying vulnerabilities, implementing security measures, and ensuring compliance with industry standards and regulations. This role will work closely with IT, development, and compliance teams to enforce security best practices and mitigate risks.
Key Responsibilities:
- Security Architecture & Engineering:
- Design and implement secure network solutions to protect against threats.
- Develop security architecture for cloud, on-premise, and hybrid systems.
- Threat Detection & Response:
- Monitor networks and systems for security breaches using tools like SIEM,IDS/IPS.
- Investigate incidents, perform root cause analysis, and implement corrective actions.
- Vulnerability Management:
- Perform regular vulnerability assessments and penetration testing.
- Manage remediation efforts across infrastructure, applications, andendpoints.
- Security Tools & Technologies:
- Deploy and maintain firewalls, antivirus, EDR, DLP, and other security systems.
- Integrate security tools into CI/CD pipelines and DevSecOps processes.
- Compliance & Governance:
- Ensure compliance with security policies and regulatory standards such as ISO 27001, HIPAA, PCI-DSS, NIST, and SOC 2.
- Support audits and documentation of controls and risk mitigation strategies.
- Policy & Awareness:
- Develop and enforce security policies, procedures, and standards.
- Provide cybersecurity training and awareness programs for employees.
- Collaboration & Reporting:
- Collaborate with IT, DevOps, legal, and compliance teams.
- Generate reports for management on security metrics, risk posture, and improvement plans.
Required Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field.
- 3+ years of experience in cybersecurity or information security.
- Hands-on experience with security tools (e.g., Splunk, Qualys, Palo Alto, CrowdStrike).
- Strong knowledge of TCP/IP, DNS, firewalls, VPNs, proxies, and SIEM.
- Understanding of security frameworks: NIST, CIS, MITRE ATT&CK.
- Experience with scripting or automation (Python, PowerShell, Bash).
Preferred Certifications (not mandatory):
- CISSP (Certified Information Systems Security Professional)
- CEH (Certified Ethical Hacker)
- CISM (Certified Information Security Manager)
- CompTIA Security+ or CASP+
- AWS/Azure/GCP Security Certifications