Cybersecurity Engineer II

The Cybersecurity Engineer II role supports the protection of organizational systems, data, and users through the design, implementation, and optimization of security technologies and controls across the enterprise.

Key Responsibilities

• Manage the full lifecycle of digital certificates, including discovery, issuance, renewal, monitoring, revocation, and automation, while administering Public Key Infrastructure (PKI) and Microsoft Active Directory Certificate Services (AD CS) environments.
• Administer enterprise encryption key management platforms and Hardware Security Modules (HSMs), ensuring secure generation, storage, rotation, archival, and destruction of cryptographic keys.
• Design, implement, maintain, and continuously improve network, endpoint, cloud, and identity security controls through monitoring, tuning, and automation.
• Optimize Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), and related platforms to improve visibility, detection accuracy, and response effectiveness.
• Identify security gaps, control weaknesses, and misconfigurations, then lead remediation initiatives and implement long-term improvements to strengthen the security posture.
• Contribute to security initiatives by partnering with Information Technology (IT), architecture, product, and project teams to support secure onboarding and integration of applications and platforms.
• Advance secure endpoint and identity practices in collaboration with infrastructure and business teams to improve protection of critical systems and data.
• Develop and maintain security standards, engineering patterns, and baselines aligned with frameworks including National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS).
• Enhance security operations using scripting, workflow automation, telemetry optimization, and continuous process improvement.
• Support team growth through mentoring, documentation, reusable solutions, and technical guidance for less experienced engineers.
• Serve as an escalation point for complex security issues, contributing to incident response readiness, runbooks, and on-call support processes.
• Research emerging security technologies and recommend solutions that improve operational efficiency and reduce organizational risk.

Required Qualifications

• Bachelor’s degree or equivalent professional experience required.
• 3+ years minimum experience; 5–8+ years total IT experience preferred, including 3–5+ years in cybersecurity engineering or a closely related security-focused role.
• Advanced experience with digital certificate lifecycle management, PKI, Microsoft AD CS, encryption key management platforms, and HSMs.
• Strong knowledge of EDR, SIEM, threat detection, threat hunting, and incident response processes.
• Hands-on experience with technologies including CrowdStrike, Microsoft Sentinel, Google SecOps, Netskope, Cisco Umbrella, BeyondTrust, Cribl, DigiCert, CyberArk Certificate Management (formerly Venafi), and Microsoft Entra.
• Deep understanding of authentication, federation, conditional access, privileged access management, and modern identity platforms.
• Experience implementing and supporting cloud security controls, particularly within Microsoft Azure and Microsoft Entra, with knowledge of Zero Trust principles and secure architecture practices.
• Ability to improve security operations through automation using tools and languages such as PowerShell, Python, and Kusto Query Language (KQL).
• Proven ability to troubleshoot and resolve complex technical and security issues across multiple systems, platforms, and teams.
• Strong ability to translate technical concepts into actionable insights and influence stakeholders across technical and non-technical groups.
• Customer-focused approach balancing security, risk management, and business objectives while managing multiple priorities.

Preferred Certifications

• CompTIA Security+
• CISSP
• OSCP
• SC-200
• AZ-500

Technologies

Public Key Infrastructure (PKI), Microsoft Active Directory Certificate Services (AD CS), Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), PowerShell, Python, Kusto Query Language (KQL), Microsoft Sentinel, Google SecOps, CrowdStrike, Netskope, Cisco Umbrella, BeyondTrust, Cribl, DigiCert, CyberArk Certificate Management (formerly Venafi), Microsoft Entra, Microsoft Azure, Hardware Security Modules (HSMs), Zero Trust, NIST, CIS.

Location

Chicago, IL (Onsite)

Compensation

The base salary range for this position in Chicago is $133,000 - $166,000 per year.

Benefits

• Comprehensive healthcare
• Paid time off
• Retirement
• Personal support
• Tailored learning and development opportunities

How to Apply

Click Apply Now to complete an application and submit your resume.

If you do not meet every requirement, you are encouraged to apply anyway.