Sr. Information Security Engineer

GATX•Chicago, IL

1d•$92,700 - $160,000

About The Position

GATX Corporation is seeking a Senior Information Security Engineer to provide technical leadership for cybersecurity initiatives that protect the organization's data, systems, and cloud environments. This role partners across IT and the business to reduce cyber risk, strengthen security controls, and advance the maturity of the cybersecurity program. GATX, founded in 1898 and headquartered in Chicago, IL, is an industry leader with over 125 years of success, powered by its people. The company offers a dynamic, energetic, and collaborative environment, providing employees with the tools and resources to advance their careers.

Requirements

Bachelor's degree or equivalent experience.
7+ years of information security experience.
5+ years supporting network or infrastructure technologies.
Experience with IAM technologies, including Entra ID, Conditional Access, MFA, and privileged access management.
Experience securing AWS and/or Azure cloud environments.
Strong understanding of cybersecurity principles, network security, vulnerability management, and incident response.
Experience with scripting, automation, and modern DevOps/CI-CD environments.
Ability to communicate technical concepts to non-technical audiences and build strong cross-functional relationships.
CISSP, CISM, CRISC, or equivalent certification required or in progress.

Nice To Haves

AWS Security Specialty certification preferred.

Responsibilities

Develop and maintain security standards and guidelines that protect company systems, data, and networks.
Manage security tools, software, and the implementation of new controls, including the design and maintenance of complex cybersecurity controls throughout the system lifecycle.
Support initiatives that reduce evolving cyber risk by applying a strong understanding of the organization’s threat landscape.
Partner with cross-functional teams to develop incident response plans and protocols.
Oversee vulnerability assessments and penetration testing to identify system and network weaknesses and coordinate with IT teams to remediate issues.
Monitor networks and systems for security incidents, take action to reduce the risk of data loss or unauthorized access, and investigate events by analyzing data, coordinating response efforts, and reporting findings to management and IT teams.
Lead the development and deployment of advanced identity protection capabilities in Entra IAM to strengthen security and align with best practices.
Improve authentication security in alignment with Zero Trust principles and increase resilience against identity-based threats.
Own administration of BeyondTrust PAM, Entra IAM, including secure configuration, timely updates, and user support.
Partner with IT teams to expand identity platform integrations and improve efficiency in identity and privileged access management.
Implement IAM policies, manage access controls, and ensure compliance with security best practices in AWS.
Automate routine tasks using tools like AWS CLI, CloudFormation, or Terraform.
Work with development teams to support CI/CD pipelines and scalable application deployments in a secure manner.
Collaborate in securely implementing Microsoft Azure Solutions in a multi-tenant cloud environment.
Work closely with LAN Administrators responsible for building and maintaining various technical systems, subscriptions, projects and knowledge bases across local and cloud environments to ensure operational and support teams have access to highly secure and highly available tools and systems necessary for business operations.
Utilize experience and knowledge to better secure Microsoft and Unix/Linux technologies such as SharePoint, Exchange, Active Directory, Microsoft Server Operating Systems, Intune, Windows 10/11, IBM AIX and Red Hat solutions.
Research and remain current on technical and industry practices for securing operating systems, hardware, and infrastructure services.
Implement security best practices where appropriate and advise the Global Head of IT Security and Senior Manager of Information Security on security technology strategies.
Act as a technical subject matter expert who can coach and mentor others to assist in their development.