Senior Security Engineer

Hub International Insurance • Chicago, IL

4d • $110,000 - $135,000

About The Position

In this role, you will manage multiple aspects of information security operations, response, and engineering. This position will contribute to a team focusing on the included, but not limited to, incident response, playbook development and execution, operational engineering, tooling maintenance, as well as being a key participant within Information security programs. They will work in close collaboration with all HUB IT teams to design and support effective Information Security Operations for Hub International.

Requirements

• Bachelor’s degree in technology or applicable experience.
• 8+ Years of experience within information security operations in multiple roles.
• 5+ years of experience with cloud infrastructure (AWS, GCP, Azure) and O365 services and technology
• 3+ years of experience with security incident response and operations
• 3+ years of experience defining, refining, and driving efficiency in operational processes
• Extensive experience with, but not excluded to: TCP/IP, DNS, WAF, SEIM, and SOAR technologies.
• Experience working with and managing Active Directory / MS Entra ID
• Experience with SOAR (Security Orchestration, Automation, and response)
• Experience with KQL and SPL or other Query Languages
• Experience with powershell, python, and shell scripting
• Expert Knowledge of information security standards, principles, and practices required.
• Knowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.
• Expert Knowledge of Windows Event and network device logging
• Expert Knowledge of email transmission, routing, and authentication concepts including, SMTP, SPF, DKIM and DMARC
• Experience in project management, systems design and integration.
• Thorough knowledge of layered systems architectures and layered solutions and designs
• The ability to interpret, put fourth recommendations for the best fit path of risk-management actions for foreseen and managing unforeseen impacts.
• Excellent Prioritization, decision making, critical thinking, communication, and relationship building skills
• Ability to lead and manage projects across multiple teams or groups.
• Ability to work independently and in a team environment

Nice To Haves

• Related certifications (e.g., GSEC, CISSP, GIAC, AWS) preferred.

Responsibilities

• Manages and is responsible for the successful completion of all tasks in assigned projects.
• Contribute to Security Operations and Engineering Team focused on maintaining the security integrity of HUBs’ mission critical suite of applications.
• Available 24/7 for any critical security incident response that may arise which requires immediate resolution.
• Work to ensure security tooling within HUB environments are operational and operating at needed levels of service and availability.
• Contribute to practice continuous improvement in response playbooks and security tooling.
• Contribute to operations KPIs to measure operational performance.
• Maintains current knowledge of relevant information security technology and techniques, bringing forth ideas for modernization and improvement.
• Ensure operational practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks.
• Engage with peers regularly on security operations functions, project status, activities, and achievements.
• Contribute to “Continuous Improvement and Posture Management” efforts, in respect to HUB’s information security tooling and systems.
• Assist in plan, organize, and execute multiple responsibilities to achieve project goals and to move operational projects to completion.
• Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards.
• Evaluation of vulnerability analysis, endpoint, and security tooling packages to ensure acceptable levels of efficacy are met.
• Technical leadership of root-cause analysis for security incidents and events, establish preventive measures, mitigations, or remediations.
• Contribute to weekly and monthly posture and response operations reporting.
• Lead in the configuration of new/existing applications, infrastructure for needed telemetry for security operations.
• Lead/Contribute to the analysis and recommendation of upgrades, changes, implementation specific to the HUB security tooling packages and services.
• Support the HUB Information Security Governance & Compliance team as needed during risk assessments, internal and external Information Security Audits, and Vendor reviews

Benefits

• health/dental/vision/life/disability insurance
• FSA, HAS and 401(k) accounts
• paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays
• eligible annual bonuses, equity and commissions may be available for some positions

What This Job Offers

• Job Type: Full-time
• Career Level: Senior