IT Security Engineer

Gulf Coast Automation Group•Chicago, IL

7d•$110,000•Hybrid

About The Position

This is an exciting opportunity to join a leading healthcare organization where you'll play a critical role in protecting enterprise systems, cloud environments, applications, and sensitive data from evolving cyber threats. As an IT Security Engineer II, you'll help strengthen the organization's cybersecurity posture by designing and implementing enterprise security solutions, leading incident response activities, managing advanced security technologies, and driving security strategy across the organization. This role offers the opportunity to work with modern cloud and security platforms while partnering with infrastructure, application, and business teams to continuously improve security operations.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline (or equivalent combination of education and experience).
Minimum of 3 years of cybersecurity experience as a Security Analyst or Security Engineer.
Experience administering and supporting enterprise security applications.
Experience leading cybersecurity projects and cross-functional initiatives.
Ability to independently manage multiple priorities with minimal supervision.
Strong knowledge of cybersecurity principles, frameworks, and best practices.
Experience designing and implementing enterprise security solutions.
Advanced incident investigation and threat analysis skills.
Working knowledge of network, application, cloud, and infrastructure security.
Excellent communication and stakeholder management skills.
Strong project management and organizational abilities.
A collaborative mindset with the ability to mentor others and influence security best practices.
Experience with Microsoft Azure Cloud Security
Experience with Cloud Security Posture Management (CSPM)
Experience with Cloud-Native Application Protection Platforms (CNAPP)
Experience with Security Information & Event Management (SIEM)
Experience with Security Orchestration, Automation & Response (SOAR)
Experience with Endpoint Detection & Response (EDR/XDR)
Experience with Identity Security and Access Management
Experience with Data Loss Prevention (DLP)
Experience with Email Security
Experience with Vulnerability Management
Experience with Threat Detection and Exposure Management
Experience with Security Incident Response
Experience with System Hardening
Experience with Intrusion Detection/Prevention (IDS/IPS)
Experience with Network, server, desktop, database, cloud, and application security
Experience with Asset Inventory and Configuration Management
Experience with Security Architecture and Enterprise Security Controls
Experience with Risk Assessments and Security Governance

Nice To Haves

Advanced, professional, or expert-level cybersecurity certification (CISSP, GIAC, CCSP, or similar).
Healthcare industry experience.
Experience working within regulated environments.

Responsibilities

Lead complex cybersecurity incident investigations, response, and recovery efforts.
Identify security threats and vulnerabilities and implement effective remediation strategies.
Architect, design, implement, and enhance enterprise security technologies and processes.
Administer, monitor, troubleshoot, and optimize multiple enterprise security platforms.
Drive automation of security operations to improve efficiency and reduce organizational risk.
Develop and maintain enterprise security policies, standards, procedures, and operational documentation.
Create both short- and long-term security technology roadmaps and business cases.
Conduct security reviews, risk assessments, and impact analyses for new and existing systems.
Develop, audit, and enhance enterprise security controls across on-premises and cloud environments.
Measure and report on enterprise security capabilities using automated and manual tools.
Collaborate with IT and business leaders to promote security awareness and best practices.
Support internal and external audits, compliance initiatives, and regulatory assessments.
Assist with HIPAA, PCI, NIST, and other security and compliance requirements.
Cross-train team members and mentor peers on operational processes and security technologies.
Participate in a rotating 24/7 on-call schedule supporting enterprise security operations.