Security Engineer

Security Engineer role in Chicago focused on building and improving controls to protect Vibes’ cloud environment, applications, workforce, and AI tools/agents.

Responsibilities

• Engineer, operate, and improve security controls for the cloud environment, including network, identity, logging, encryption, and configuration baselines
• Increase security tooling coverage so every active project and account is visible in a single view; track and close coverage gaps
• Define guardrails and secure defaults that guide engineering teams toward safer implementations
• Run vulnerability management end to end: ingestion, triage, prioritization based on real-world risk, assignment, and closure
• Coordinate with remediation owners to align on timelines, unblock fixes, and manage exceptions
• Report on SLA performance, backlog age, and risk trends to security leadership
• Tune detections to improve signal and reduce noise; respond to security events as they arise
• Write, maintain, and rehearse incident response runbooks
• Plan and run tabletop exercises; translate lessons learned into concrete improvements
• Participate in the security on-call rotation (if applicable)
• Build and improve how access is granted, reviewed, and removed, including group-based access, provisioning automation, and periodic access reviews
• Own security steps in joiner, mover, and leaver processes with GRC and IT Support
• Apply least privilege, RBAC, and SSO across people, service accounts, and agent identities
• Review code and infrastructure-as-code changes for security risk prior to production
• Convert recurring findings into reusable patterns, secure templates, and automated checks (for example in CI/CD)
• Coach engineers on why findings matter and how to resolve them
• Use language models and agents to strengthen workforce security, including triage support, investigation assistance, and policy and access workflows
• Support an agentic, AI-leaning software development lifecycle, including controls around AI-generated code, agent permissions, and review gates
• Assess security of AI tools and agents (bought or built), including access scope, data handling, credential management, logging, and prompt-injection and data-exfiltration risk
• Communicate risk clearly and credibly to engineers, executives, and auditors, adjusting depth and framing by audience
• Partner with GRC to support audits and compliance evidence requests (e.g., SOC 2, ISO 27001)

Requirements

• 3+ years of cybersecurity experience at a SaaS company (or equivalent)
• Hands-on security engineering experience in a cloud environment; AWS preferred
• Comfort reading code and infrastructure as code (e.g., Terraform/CloudFormation; Python/Go/TypeScript) with the ability to spot security issues and provide constructive review feedback
• Practical experience with vulnerability management and incident response
• Strong understanding of IAM: least privilege, RBAC, SSO, access reviews, and joiner/mover/leaver lifecycle for people, service accounts, and agent identities
• Working knowledge of where AI systems introduce risk and where they reduce work
• Strong written and verbal communication, including the ability to explain risk to any audience

Technologies

• AWS, Terraform, CloudFormation
• Python, Go, TypeScript
• CI/CD
• SOC 2, ISO 27001
• SIEM, EDR, CSPM
• Vulnerability scanning, IdP
• CISSP, NIST CSF, CIS Benchmarks, OWASP
• LLM Top 10, MITRE ATT&CK

Benefits

• Competitive salaries
• Options
• Medical, dental and vision coverage
• Short and long term disability
• Life insurance
• 11 paid holidays
• Flexible vacation
• Commuter benefits
• 401(k) plan and match
• Paid parental leave program

What You’ll Bring

Required

• 3+ years of cybersecurity experience at a SaaS company (or equivalent)
• Hands-on security engineering experience in a cloud environment; AWS preferred
• Comfort reading code and infrastructure as code (e.g., Terraform/CloudFormation; Python/Go/TypeScript), spotting security issues, and providing constructive review feedback
• Practical experience with vulnerability management and incident response
• Solid understanding of IAM principles: least privilege, RBAC, SSO, access reviews, and joiner/mover/leaver lifecycle for people, service accounts, and agent identities
• Working knowledge of where AI systems introduce risk and where they reduce work
• Strong written and verbal communication to explain risk to any audience

Preferred

• Relevant certification, such as CISSP or an AWS security certification
• Experience with SIEM / EDR / CSPM / vulnerability scanning / IdP tooling
• Experience automating security workflows with scripting or APIs
• Hands-on experience evaluating or building LLM-based applications or agents
• Familiarity with frameworks such as NIST CSF, CIS Benchmarks, OWASP (including the LLM Top 10), or MITRE ATT&CK
• Experience running tabletop exercises or leading incidents

Core Values

• Respect, honesty, and integrity for all stakeholders
• Always be learning
• Relentless focus on the customer
• Never be satisfied
• Create value
• Seek accountability and ownership

Location: Chicago, IL (onsite)

Salary: USD 110,000 - 120,000 per year

Minimum experience: 3 years