Cooper’s Hawk Winery & Restaurants is seeking an Information Security Engineer to help protect business-critical systems across a hybrid environment spanning Microsoft Azure, Oracle Cloud, Salesforce, and on-prem infrastructure. This role supports secure applications, cloud services, security tooling, identity and access controls, and resilience efforts aligned to compliance expectations.
Location: Downers Grove, IL (hybrid). Compensation: $105,000 - $120,000 per year, based on experience, skill set, qualifications, and internal pay equity.
Responsibilities
- Assist with designing, implementing, and maintaining security controls across a hybrid infrastructure, emphasizing secure configurations and reduced attack surface for Azure, Oracle Cloud (ERP, Simphony POS), and Salesforce Commerce Cloud.
- Help develop and maintain secure configuration standards for cloud services, with a focus on Azure.
- Engineer and manage security tooling across cloud and on-prem, including Microsoft Defender for Endpoint, Defender for Identity, Cisco VPN, Meraki firewalls, and Cloudflare WAF.
- Integrate security into the SDLC by embedding SAST, DAST, and SCA into GitHub and CI/CD pipelines, supporting threat modeling and code review practices to strengthen APIs and customer-facing applications.
- Administer and tune Cloudflare WAF policies, bot mitigation, and access rules to help address OWASP Top 10 risks, credential stuffing, and scraping attempts.
- Support identity and access controls across Azure Entra ID and on-prem Active Directory, including Conditional Access Policies, RBAC, Just-In-Time (JIT) access, and MFA enforcement.
- Monitor and respond to security threats by tuning detections, supporting investigations, and coordinating incident containment and recovery alongside MDR and SOC teams.
- Perform and support vulnerability assessments and penetration testing, ensuring remediation is prioritized by risk and tracked to closure.
- Support security projects such as PCI-DSS audits, NIST CSF 2.0 alignment, and cloud security posture improvements.
- Continuously research emerging threats, CVE items, and TTP trends to maintain defenses and update detection rules.
Requirements
- Bachelor’s degree in information security, Computer Science, or a related field (or equivalent practical experience).
- 3+ years of progressive experience in infrastructure and application security within hybrid (on-prem and cloud) environments.
- Technical expertise with Windows Server and desktop platforms, including Active Directory and Entra ID, plus core networking fundamentals such as DNS, TCP/IP, VLANs, and VPNs.
- Experience with enterprise security tools, including EDR, IPS, IAM, DLP, and vulnerability management platforms.
- Knowledge of cloud security best practices with hands-on experience securing services in Azure and/or AWS.
- Understanding of application security principles, including OWASP Top 10, secure SDLC practices, and securing APIs and web applications.
- Knowledge of integrating security into DevOps pipelines, including managing cloud-native security controls such as WAFs, API gateways, and bot protection solutions.
- Familiarity with Salesforce security configurations and securing SaaS platforms.
- Experience with SIEM, IDS/IPS, endpoint protection, firewalls, and security monitoring tools.
- Knowledge of compliance and risk frameworks including PCI-DSS, NIST CSF 2.0, and SOX/ITGC.
- Strong communication, collaboration, and problem-solving skills with the ability to work across technical and business teams.
Technologies
Microsoft Azure, Oracle Cloud, Salesforce, Salesforce Commerce Cloud, Microsoft Defender for Endpoint, Defender for Identity, Cisco VPN, Meraki firewalls, Cloudflare WAF, Cloudflare WAF policies, Azure Entra ID, Active Directory, Conditional Access Policies, RBAC, Just-In-Time (JIT) access, MFA enforcement, MDR, SOC, SAST, DAST, SCA, GitHub, CI/CD pipelines, PCI-DSS, NIST CSF 2.0, CVE, TTP, SDLC, SIEM, IDS/IPS, EDR, IPS, IAM, DLP, vulnerability management platforms, AWS, API gateways, bot protection solutions, Salesforce security configurations, SOX/ITGC, Meraki, Cloudflare.
Benefits
- Monthly Dining Allowance
- 50% Dining and Carryout
- 40% Retail Wine
- 20% Retail and Private Events
- Monthly Complimentary Wine Tasting for Two
- Medical, Prescription, Dental, Vision Insurance plus Telemedicine and Wellness Program
- Company Matching 401(k) Retirement Savings Plan
- Supplemental Health Coverage (Voluntary Accident, Hospital Indemnity and Critical Illness)
- Flexible Savings Accounts- Health and Dependent Care
- Health Savings Account
- Long-Term Disability; Voluntary Short-Term Disability
- Basic Life and AD&D Insurance (with option to purchase additional coverage)
- Paid Parental Leave
- Highly Competitive Pay plus Team Member Incentives & Rewards
- Paid Time Off
- Tenure Recognition Program
- Complimentary Gym Membership in RSC Building
- Hybrid Work Week (3 days in office, 2 days remote, depending on role)
Preferred Qualifications
- Industry-recognized security certifications (e.g., CISSP, CISM, CRISC, CCSK, or relevant cloud/security certifications).
- Experience in the hospitality, restaurant, or retail industry.
- Familiarity with DevSecOps principles and secure CI/CD integration.
