Senior Security Engineer

Strata Decision Technology•Chicago, IL

2d•Hybrid

About The Position

As the Senior Security Engineer, you will work as a team member on the Security team, ensuring Strata has the correct security measures in place and providing continuous improvement opportunities to extend our capabilities and security to our client data. You will assist in the maintenance of the Zero Trust Security framework and associated tooling across the organization. Strata has a hybrid environment, and the ideal candidate will need to be comfortable working in a hybrid environment with on-premises and cloud infrastructure. In your role as the Senior Security Engineer, you will be tasked with managing and maintaining this environment, including configuration management, upgrades, identification of end-of-life/support systems that need to be replaced, architecture of new solutions, and recommending and executing modifications to these systems to improve efficiency, reliability, and performance. The engineer in this role will focus on the following areas and technologies: Zero Trust Principles Expansion: Mature Strata’s newly implemented Zero Trust program through policy refinement, tool optimization, roadmap development, and alignment to business use cases. Manage identity, access, and secure connectivity controls, including MFA, conditional access, privileged access, least privilege, DNS/content filtering, secure web gateway, and certificate-based controls. Partner with IT, networking, security, and business teams to resolve access issues, blocked traffic, policy behavior, connectivity problems, and related security events. Strengthen enterprise security controls across endpoint, cloud, SaaS, AI, identity, network, and data protection platforms using security frameworks, CIS benchmarks, lifecycle management, and threat data. Tool Deployment & Integration: Lead the selection, deployment, and optimization of security tools including SIEM, EDR, XDR, IAM, and cloud security solutions. Implement automation for security operations to improve efficiency, accuracy, and response times. Assist in tuning tools to alleviate alert fatigue and false positives. Leverage AI to ensure workflows are efficient and automated. Cross-Functional Collaboration: Work closely with IT, DevOps, and other teams to integrate security best practices into all aspects of the business. Partner with other members of the security organization to establish security guidelines that enable the organization to move fast in a safe and secure manner. Communicate with all levels of business to explain complex concepts in terms they understand.

Requirements

Minimum 4-6 years of security experience
Certifications such as CCIE, CCSE, GIAC, or equivalent.
Strong analytical skills – the ability to assist in resolving various systems issues for multiple integrated locations and systems.
Time management and organizational skills are imperative.
Strong communication skills, written and verbal, with all levels of management and personnel.
Ability to learn quickly and apply learned principles.

Nice To Haves

Previous experience with scripting and use of Terraform is a plus.
This role will interface with Strata clients from time to time.

Responsibilities

Work as a team member on the Security team ensuring Strata has the correct security measures in place.
Provide continuous improvement opportunities to extend our capabilities and security to our client data.
Assist in the maintenance of the Zero Trust Security framework and associated tooling across the organization.
Manage and maintain the hybrid environment including configuration management, upgrades, identification of end-of-life/support systems that need to be replaced, architecture of new solutions, and recommending and executing modifications to these systems to improve efficiency, reliability, and performance.
Mature Strata’s newly implemented Zero Trust program through policy refinement, tool optimization, roadmap development, and alignment to business use cases.
Manage identity, access, and secure connectivity controls, including MFA, conditional access, privileged access, least privilege, DNS/content filtering, secure web gateway, and certificate-based controls.
Partner with IT, networking, security, and business teams to resolve access issues, blocked traffic, policy behavior, connectivity problems, and related security events.
Strengthen enterprise security controls across endpoint, cloud, SaaS, AI, identity, network, and data protection platforms using security frameworks, CIS benchmarks, lifecycle management, and threat data.
Lead the selection, deployment, and optimization of security tools including SIEM, EDR, XDR, IAM, and cloud security solutions.
Implement automation for security operations to improve efficiency, accuracy, and response times.
Assist in tuning tools to alleviate alert fatigue and false positives.
Leverage AI to ensure workflows are efficient and automated.
Work closely with IT, DevOps, and other teams to integrate security best practices into all aspects of the business.
Partner with other members of the security organization to establish security guidelines that enable the organization to move fast in a safe and secure manner.
Communicate with all levels of business to explain complex concepts in terms they understand.