Security Engineer II

Gulf Coast Automation Group•Chicago, IL

4d•Hybrid

About The Position

TalentFish is hiring a Security Engineer II in a hybrid role, with onsite attendance at multiple Chicago-area locations a couple of days per month. This hands-on engineering position helps strengthen the organization’s cybersecurity posture by improving security controls, leading incident response, and supporting enterprise risk and compliance. The engineer owns and improves security applications, supports security projects and audits, and works with business and IT partners. The role may be contract to hire or direct hire and includes participation in an on-call rotation as assigned.

Requirements

At least 4 years of cybersecurity analyst or engineering experience, including security application ownership and project leadership, with 8–10 years of total experience beginning in IT.
At least 4 years of experience with automation and scripting languages such as Python and PowerShell.
Experience implementing security tools, documenting processes, measuring return on investment, and serving as an internal security engineering expert.
One or more certifications, such as CISSP or CompTIA Security+.
Knowledge of security architecture, threat detection, vulnerability management, and incident response across endpoint, network, application, and cloud systems.
Experience with security controls and tools such as SIEM, EDR/XDR, DLP, IDS/IPS, CSPM, CNAPP, or SOAR, including automation.
Bachelor’s degree required.
Knowledge of HIPAA, PCI, and NIST.
Strong communication, project management, and mentoring skills.
Authorization to work in the U.S. without current or future visa sponsorship.
Successful completion of applicable background-check requirements is contingent on an offer.

Nice To Haves

Experience with CrowdStrike Falcon EDR/DLP/Client, Tenable Security Center, Microsoft E5, Delinea, Qualys, xDome/Medigate, Prisma, and Cisco FTD.
Passion for learning about current trends and advancing professional skills.

Responsibilities

Lead complex security incident investigations, response, and recovery as the security engineering lead.
Identify threats and vulnerabilities and participate in an on-call rotation as assigned.
Manage 2–3 security applications, improve controls, troubleshoot issues, and automate workflows.
Assess system risks and security requirements before and after implementation.
Measure and report security capabilities.
Develop and communicate security policies, standards, procedures, and awareness materials with business and IT partners.
Support audits and compliance.
Deliver security projects.
Mentor junior team members.