Senior Cybersecurity Engineer
On-siteChicago, Illinois, United States or Atlanta, Georgia, United States
Job Summary
Own the operational health of engineering domains including identity, network segmentation, cloud security baselines, endpoint, and vulnerability management. Lead cross-team initiatives spanning Security, IT, Identity, Cloud Operations, and delivery to harden controls and migrate tools without breaking production. Design new control patterns, reference architectures, and decision records that auditors review, while producing evidence maps and runbooks. Partner with Cloud Ops, Identity, SOC, and GRC teams to solve engineering problems, ensuring logging coverage, telemetry quality, and isolation capabilities. Mentor Mid and Associate engineers through pairing, code reviews, and clear standards to improve output quality. Push toward repeatable, codified controls using IaC and policy-as-code to replace manual work.
Required Qualifications
- 5+ years in security engineering, with hands-on responsibility for implementing controls across identity, network, cloud, endpoint, and/or monitoring
- Strong fundamentals in IAM, network segmentation, encryption / key management, and centralized logging / monitoring
- Experience with at least one major cloud platform (Azure, AWS, GCP) in a security-engineering capacity
- Ability to produce clear architecture documentation, runbooks, and decision records that hold up under audit and peer review
- Excellent written and verbal communication; able to explain tradeoffs across Security, IT, and delivery audiences in plain language
- Comfortable mentoring less senior engineers and owning quality-of-output for one or more domains
- Regulated-environment experience (CMMC, NIST 800-171, NIST 800-53, FedRAMP-aligned, SOC 2, ISO 27001, HIPAA, PCI)
- Infrastructure-as-code experience (Terraform, Bicep, Pulumi) and policy-as-code (Sentinel, OPA)
- Security tooling integration experience (SIEM, EDR, vulnerability scanning, IAM, secrets management)
- Industry certifications (one or more): CISSP, CCSP, GIAC (e.g., GCED, GPEN, GCWN), AZ-500, AWS Security Specialty
- Experience supporting a SOC's detection/response engineering needs
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field — or equivalent applicable years of experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.