Senior Security Engineer

HUB International • Chicago, IL

7d • $100,000 - $135,000

About The Position

The Senior Security Engineer manages information security identity operations, governance, and engineering. The role contributes to incident response, playbook development and execution, operational engineering, tooling maintenance, and broader information security programs. Working closely with HUB IT teams, the engineer designs and supports effective information security operations for HUB International.

The position helps maintain the security integrity of HUB’s mission-critical applications, ensures identity tooling is operational and meets service and availability needs, and contributes to operational KPIs and reporting. It also leads continuous improvement, supports projects through technical leadership, and contributes to security requirements, standards, procedures, and reference architectures. The role requires availability 24/7 for critical security incidents that require immediate resolution.

The expected salary range is $100,000 to $135,000, with pay affected by skills, experience, working location, business line, scope, and level. HUB describes its benefits and total compensation as potentially including health, dental, vision, life, and disability insurance; FSA and HSA accounts; 401(k); paid time off; and, for eligible positions, annual bonuses, equity, and commissions. Other offerings include training, licensing support, ongoing development, retirement savings matching, paid parental leave, and a wellbeing program. Benefits and programs vary by employment status, role, location, and eligibility.

Requirements

• Bachelor’s degree in technology or applicable experience.
• At least 8 years of experience in information security operations across multiple roles.
• At least 5 years of experience with cloud infrastructure (AWS, GCP, or Azure) and O365 services and technology.
• At least 5 years of experience with security identity operations.
• At least 3 years of experience defining, refining, and improving the efficiency of operational processes.
• Extensive experience with identity and access protocols and technologies, including SAML, OID, OAuth, SCIM, and MFA.
• Experience working with and managing Active Directory and MS Entra ID.
• Experience with IAM technologies, including IAM, PIM, and PAM, and directory services or products such as SailPoint, Okta, Active Directory, OneLogin, LastPass, Keeper, and Delinia.
• Experience with KQL, SPL, or other query languages.
• Experience with PowerShell, Python, and shell scripting.
• Expert working knowledge of Active Directory, MS Entra ID, and Okta.
• Knowledge of information security identity standards, principles, and practices.
• Knowledge of industry security standards, guidelines, and regulatory or compliance requirements, such as ISO 27001, NIST 800-53, SOC 2, PCI, and SOX.
• Experience in project management, systems design, and integration.
• Thorough knowledge of layered systems architectures, solutions, and designs.
• Ability to interpret risks and recommend suitable risk-management actions for anticipated and unforeseen impacts.
• Excellent prioritization, decision-making, critical-thinking, communication, and relationship-building skills.
• Ability to work independently and in a team environment.

Nice To Haves

• Related certifications such as GSEC, CISSP, GIAC, or AWS.

Responsibilities

• Manage multiple aspects of information security identity operations, governance, and engineering.
• Contribute to incident response, playbook development and execution, operational engineering, tooling maintenance, and information security programs.
• Maintain the security integrity of HUB’s mission-critical applications as part of the Security Support and Identity Operations Team.
• Respond to critical security incidents requiring immediate resolution; the position is available 24/7 for these incidents.
• Ensure security identity tooling in HUB environments is operational and meets required service and availability levels.
• Contribute to identity operations KPIs and measure operational performance.
• Maintain current knowledge of identity, authentication, authorization, and governance technologies and techniques, and recommend modernization and improvements.
• Establish identity operations practices and tools that enable rapid identification of security events and mitigation of risks.
• Engage with peers on security operations functions, project status, activities, and achievements.
• Lead continuous improvement efforts for HUB’s information security identity tooling and systems.
• Plan, organize, and execute responsibilities to achieve project goals, and provide technical leadership to complete operational projects.
• Contribute to security requirements, standards, procedures, and reference architectures that comply with policies and technical standards.
• Evaluate identity management security tooling packages to ensure acceptable efficacy.
• Lead or contribute to identity management analysis, governance, and certification operations.
• Lead or contribute to weekly and monthly posture and identity operations reporting.
• Lead configuration of new applications and infrastructure needed for security identity operations.
• Analyze and recommend upgrades, changes, and implementations to support and scale HUB’s security identity operations.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Flexible spending account (FSA)
• Health savings account (HSA)
• 401(k)
• Retirement savings matching
• Paid time off, including vacation, sick, personal, floating holidays, and company holidays
• Paid parental leave
• Wellbeing program
• Structured training, licensing support, and ongoing development opportunities
• Eligible annual bonuses, equity, and commissions may be available for some positions

What This Job Offers

• Job Type: Full-time
• Career Level: Senior