Sr IT Security Engineer

American Medical Association’s Infrastructure Ops team is hiring a Sr IT Security Engineer for a remote role based in Chicago, IL. In this position, you will help protect enterprise systems through security and cyber threat intelligence, while designing and maintaining security platforms and operational solutions.

You will work across security programs, day-to-day security technologies and processes, and incident detection and response, with clear reporting for leadership, audit compliance, and continuous improvement across cloud and hybrid environments.

Key Responsibilities

• Research, design, and advocate for new security technologies, architectures, and security products that meet enterprise and customer, partner, and vendor security requirements.
• Plan, document, and execute enterprise-wide security programs, including vulnerability identification and testing and a network scanning framework for public and private networks and related technologies.
• Configure and troubleshoot vulnerability assessment tools and endpoint solutions, perform scans, identify and research threats, and summarize results and corrective actions where appropriate.
• Partner with IT, compliance, audit, and others to ensure applications and infrastructure are developed, implemented, and administered in line with IT security standards and regulatory audit compliance.
• Communicate IT security policies and procedures to management and end users across businesses.
• Collect and analyze defined metrics, including security dashboards and training results, and report findings to leadership.
• Develop and deliver information security awareness training, including phishing simulations and risk-based training content for high-risk users.
• Identify, collect, and organize credible threat intelligence and subject matter related to current and emerging threats using available tools, applications, and open-source information.
• Define and document application security standards for developers and ensure compliance with applicable security controls when standards are used.
• Design, lead, and project manage the development and configuration of security tools and automation based on defined use cases.
• Proactively monitor, analyze, block, and respond to malware and emerging threats; act as a technical point of contact during and after incidents, including digital forensics procedures.
• Conduct operational threat hunting exercises to proactively find incidents in the AMA environment.
• Perform threat modeling and risk assessments using standard security frameworks for cloud services.
• Monitor and audit on-premise and cloud networks and systems, including service changes.
• Document incident response procedures and support management communications during incidents.
• Assist in management of security services providers.
• Research new threats, attacks, and risks to infrastructure and software.
• Define and document operating procedures for incident identification, investigation, and response.
• Work with business teams to identify and address data security risks in business processes.
• Analyze and recommend improvements to the organization’s security posture within cloud and hybrid environments and associated services and configurations.
• Improve security reporting by coordinating vulnerability management, penetration testing, and infrastructure compliance.
• Create or update operational processes and procedures for security operations, incident management, and code development.

Qualifications

• Bachelor’s degree required in Information Security, Engineering, Computer Science, or a related field.
• Demonstrated progression toward one or more security certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), CISSP/CISA, or CISM.
• 5+ years of Security Operations experience, including cyber incident investigations.
• Strong understanding of network and host-based security applications and tools.
• Exposure to enterprise web application programming and Application Security (AppSec).
• Knowledge of browser security controls, web application security frameworks, and authentication infrastructures including SAML and OAUTH, plus related IT security and IT risk context across infrastructure, endpoints, networks, databases, and systems.
• Understanding of cloud networking concepts and architecture to develop new designs and security strategies across infrastructure, platform, and software as a service.
• Excellent written and verbal communication skills, including translating technical concepts for business leaders and users with clear emphasis on threat urgency and incident priority.
• Ability to respond to security incidents promptly and independently under time pressure.
• Excellent analytical, organizational, and communication skills, including demonstrated ability to facilitate cross-functional teams.
• Experience with continuous improvements and agile methodology.

Technologies

• Firewalls
• SIEM
• Data Loss Prevention
• Web Application Firewalls
• Application Security Testing
• VPN
• SAML
• OAUTH
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• CISSP
• CISA
• CISM

Location: Chicago, IL (remote). Compensation: USD 115,523 to 150,972 per year.