Cybersecurity Engineer

Outform Group•Chicago, IL

2d•Hybrid

About The Position

The Cybersecurity Engineer is a hands-on individual contributor role responsible for executing and improving the organization’s cybersecurity program across identity, cloud, endpoint, and infrastructure environments. This position blends engineering, administration, and light architecture, with a strong emphasis on directly getting work done, closing gaps, and driving security improvements to completion. This role is responsible for directly executing security improvements, validating configurations, driving remediation items to closure, and partnering with IT and business teams to improve day-to-day security outcomes. The role supports a global, mid-sized environment and works closely with internal teams and external security partners to reduce risk in a practical, scalable way. The position aligns to NIST CSF 2.0 and contributes to the organization’s progression toward ISO 27001.

Requirements

Hands-on background in IT, infrastructure, identity, endpoint administration, security operations, or cybersecurity
Comfortable working across hybrid identity, Microsoft 365/Azure, and endpoint environments
Proven track record of driving technical work to completion across multiple teams
5+ years of experience in IT, infrastructure, identity, endpoint administration, security operations, or cybersecurity in a hands-on role
Experience working across infrastructure, identity, and cloud environments
Experience coordinating with MDR/SOC or managed security providers
Track record of executing and completing technical projects
Strong working knowledge of Active Directory and Entra ID
Strong working knowledge of Identity and access management (IAM) concepts
Strong working knowledge of Microsoft 365 security and administration
Strong working knowledge of Azure security fundamentals
Strong working knowledge of Windows administration
Strong working knowledge of Endpoint and device management (Intune / MDM)
Familiarity with EDR, SIEM, and vulnerability management workflows
Familiarity with email security platforms
Familiarity with secure software development concepts
Familiarity with IoT and distributed endpoint environments
Familiarity with AI tools and related security considerations
Exposure to hybrid identity environments (on-prem + cloud)
Exposure to Microsoft 365, Azure, and enterprise SaaS platforms
Exposure to ERP systems (including Dynamics 365)
Exposure to multi-site, global organizations
Pragmatic and execution-focused
Strong follow-through and ownership mindset
Comfortable working directly with users and holding accountability
Clear, direct communicator
Organized and able to manage multiple priorities
Able to operate independently without heavy oversight
Comfortable moving between engineering, administration, and security operations work

Responsibilities

Directly execute cybersecurity initiatives and own projects through completion
Improve security posture across identity, cloud, and endpoint environments
Standardize configurations, access controls, and security practices
Coordinate security operations with external partners (MDR/SOC) while ensuring internal follow-through
Provide direct follow-up and accountability for user-driven security risks
Drive remediation items to closure across teams and stakeholders
Drive and directly execute day-to-day cybersecurity work across infrastructure, systems, and users
Identify gaps and implement practical, defensible improvements
Lead remediation efforts, ensuring issues are tracked through to closure
Maintain clear documentation, standards, and operational consistency
Lead administration and improvement of Active Directory and Entra ID environments
Drive cleanup, standardization, and access control improvements
Implement and refine SSO, MFA, and conditional access policies
Strengthen identity governance, privilege management, and lifecycle practices
Support secure configuration and ongoing improvement of Microsoft 365 services
Assist with Azure security posture, access control, and configuration reviews
Partner with infrastructure teams to ensure consistent cloud security practices
Act as primary internal point of coordination with MDR/SOC providers
Review alerts, incidents, and findings, and ensure follow-through and remediation
Coordinate vulnerability remediation with system and application owners, driving closure
Improve response workflows and operational visibility
Coordinate phishing simulations and awareness campaigns; follow up directly with users who fail simulations (coaching, remediation, accountability)
Work with managers as needed to reinforce expectations
Improve program effectiveness through targeted follow-up and measurable outcomes
Support endpoint security and device management (Intune, MDM)
Execute and contribute to Windows administration where it impacts security posture
Help enforce consistent configuration and compliance standards
Provide input on secure software development practices
Support evaluation and governance of AI tools and associated risks (awareness-oriented, not deep research role)
Contribute to security considerations for IoT and retail/digital display environments
Ensure security is incorporated into new systems and deployments in a practical, risk-based manner