Security Engineer
$78,016–$119,191 year
HybridChicago, Illinois, United States
Job Summary
Establish and enforce identity and cloud security controls across Microsoft Entra, Azure, and Oracle Cloud, including IAM lifecycle management, Zero Trust tuning, and secure landing zones. Operate the Palo Alto Prisma Access platform and Microsoft Purview DLP policies to protect sensitive data, while triaging incidents and optimizing detection rules. Partner with SOC, engineering, and cloud teams to integrate security into new applications and design reviews, ensuring alignment with ISO 27001, NIST 800-171, and CMMC Level 2 standards. This role requires a hands-on approach to building and iterating technical configurations rather than writing governance documents. You will work a hybrid schedule with three days in our downtown Chicago office and two days remote.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
- Equivalent professional experience will be considered
- 5+ years of hands-on Security Engineering experience with demonstrated ownership of enterprise security platforms in production
- Pure governance, audit, or policy-only backgrounds will not match the work in this role
- Deep, hands-on IAM lifecycle experience with Microsoft Entra (SSO, MFA, conditional access, lifecycle workflows) and applied Zero Trust implementation
- Hands-on cloud security experience with Microsoft Azure (required)
- Hands-on configuration and operation of the Palo Alto security platform: Prisma (Access and Cloud), Cortex XDR, and XSIAM
- Implementation-level experience with Microsoft Purview for DLP, including policy authoring, classification, labeling, tuning, and incident handling
- Working knowledge of AI risks (data exposure, prompt injection, model misuse, shadow AI) and the controls used to mitigate them in an enterprise setting
- Comfort working across on-prem and cloud environments and across Windows, macOS, and Linux endpoints
- Familiarity with compliance frameworks (ISO 27001, NIST 800-171, CMMC Level 2, SOC 2) and the ability to translate a control requirement into a working configuration
- Certifications: CompTIA Security+ or (ISC)2 SSCP or PCCSE (Palo Alto Networks Certified Cloud Security Engineer) an equivalent foundational technical certification
- 3 days per week in our downtown Chicago office
- 2 days remote from home
- Strong written and verbal communication
- Bias for action
- Comfort with ambiguity
- Collaboration across teams
- Operational discipline
Desired Qualifications
- Equivalent professional experience will be considered
- Pure governance, audit, or policy-only backgrounds will not match the work in this role
- Hands-on cloud security experience with Oracle Cloud Infrastructure (strongly preferred)
- Technical configuration of native security services
- Build secure-by-default templates
- Data source onboarding, parser tuning, correlation rules, detection content, and SOAR playbooks that feed Unit 42
- Reduce noise without missing real exposure
- Handle DLP incident triage, label troubleshooting, and policy iteration based on what production actually shows you
- Evaluate emerging AI risks (prompt injection, model abuse, sensitive-data leakage, shadow AI) and design configurations that mitigate them in our environment
- Partner with product and engineering teams shipping AI-enabled features so the controls land at the right layer
- Review the security design of new SaaS, IaaS, PaaS, and in-house applications and produce specific, actionable findings
- Work with project teams early so controls are designed in, not retrofitted after go-live
- Microsoft Azure Security certification (AZ-500 or equivalent)
- Microsoft Purview Information Protection and DLP certification or equivalent
- Oracle Cloud Infrastructure security credentials
- Microsoft Cybersecurity Architect (SC-100)
- CISSP or CCSP
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.