Senior Security Engineer

HUB International • Chicago, IL

7d • $110,000 - $135,000

About The Position

In this role, you will manage multiple aspects of information security operations, response, and engineering. This position will contribute to a team focusing on the included, but not limited to, incident response, playbook development and execution, operational engineering, tooling maintenance, as well as being a key participant within Information security programs. They will work in close collaboration with all HUB IT teams to design and support effective Information Security Operations for Hub International.

Objectives of this Role
Manages and is responsible for the successful completion of all tasks in assigned projects.
Contribute to Security Operations and Engineering Team focused on maintaining the security integrity of HUBs’ mission critical suite of applications.
Available 24/7 for any critical security incident response that may arise which requires immediate resolution.
Work to ensure security tooling within HUB environments are operational and operating at needed levels of service and availability.
Contribute to practice continuous improvement in response playbooks and security tooling.
Contribute to operations KPIs to measure operational performance.
Maintains current knowledge of relevant information security technology and techniques, bringing forth ideas for modernization and improvement.
Ensure operational practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks.
Engage with peers regularly on security operations functions, project status, activities, and achievements.
Contribute to “Continuous Improvement and Posture Management” efforts, in respect to HUB’s information security tooling and systems.
Assist in plan, organize, and execute multiple responsibilities to achieve project goals and to move operational projects to completion.
Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards.

Daily and Monthly Responsibilities
Evaluation of vulnerability analysis, endpoint, and security tooling packages to ensure acceptable levels of efficacy are met.
Technical leadership of root-cause analysis for security incidents and events, establish preventive measures, mitigations, or remediations.
Contribute to weekly and monthly posture and response operations reporting.
Lead in the configuration of new/existing applications, infrastructure for needed telemetry for security operations.
Lead/Contribute to the analysis and recommendation of upgrades, changes, implementation specific to the HUB security tooling packages and services.
Support the HUB Information Security Governance & Compliance team as needed during risk assessments, internal and external Information Security Audits, and Vendor reviews

Requirements

• Bachelor’s degree in technology or applicable experience.
• 8+ Years of experience within information security operations in multiple roles.
• 5+ years of experience with cloud infrastructure (AWS, GCP, Azure) and O365 services and technology
• 3+ years of experience with security incident response and operations
• 3+ years of experience defining, refining, and driving efficiency in operational processes
• Extensive experience with, but not excluded to: TCP/IP, DNS, WAF, SEIM, and SOAR technologies.
• Experience working with and managing Active Directory / MS Entra ID
• Experience with SOAR (Security Orchestration, Automation, and response)
• Experience with KQL and SPL or other Query Languages
• Experience with powershell, python, and shell scripting
• Expert Knowledge of information security standards, principles, and practices required.
• Knowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.
• Expert Knowledge of Windows Event and network device logging
• Expert Knowledge of email transmission, routing, and authentication concepts including, SMTP, SPF, DKIM and DMARC
• Experience in project management, systems design and integration.
• Thorough knowledge of layered systems architectures and layered solutions and designs
• The ability to interpret, put fourth recommendations for the best fit path of risk-management actions for foreseen and managing unforeseen impacts.
• Excellent Prioritization, decision making, critical thinking, communication, and relationship building skills
• Ability to lead and manage projects across multiple teams or groups.
• Ability to work independently and in a team environment

Nice To Haves

• Related certifications (e.g., GSEC, CISSP, GIAC, AWS) preferred.

Responsibilities

• Manages and is responsible for the successful completion of all tasks in assigned projects.
• Contribute to Security Operations and Engineering Team focused on maintaining the security integrity of HUBs’ mission critical suite of applications.
• Available 24/7 for any critical security incident response that may arise which requires immediate resolution.
• Work to ensure security tooling within HUB environments are operational and operating at needed levels of service and availability.
• Contribute to practice continuous improvement in response playbooks and security tooling.
• Contribute to operations KPIs to measure operational performance.
• Maintains current knowledge of relevant information security technology and techniques, bringing forth ideas for modernization and improvement.
• Ensure operational practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks.
• Engage with peers regularly on security operations functions, project status, activities, and achievements.
• Contribute to “Continuous Improvement and Posture Management” efforts, in respect to HUB’s information security tooling and systems.
• Assist in plan, organize, and execute multiple responsibilities to achieve project goals and to move operational projects to completion.
• Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards.
• Evaluation of vulnerability analysis, endpoint, and security tooling packages to ensure acceptable levels of efficacy are met.
• Technical leadership of root-cause analysis for security incidents and events, establish preventive measures, mitigations, or remediations.
• Contribute to weekly and monthly posture and response operations reporting.
• Lead in the configuration of new/existing applications, infrastructure for needed telemetry for security operations.
• Lead/Contribute to the analysis and recommendation of upgrades, changes, implementation specific to the HUB security tooling packages and services.
• Support the HUB Information Security Governance & Compliance team as needed during risk assessments, internal and external Information Security Audits, and Vendor reviews

Benefits

• health/dental/vision/life/disability insurance
• FSA, HAS and 401(k) accounts
• paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays
• eligible annual bonuses, equity and commissions may be available for some positions

What This Job Offers

• Job Type: Full-time
• Career Level: Senior