We are PEAK6, a leading investment firm. You'll find us headquartered in the historic Chicago Board of Trade building, where we first opened our doors in 1997. Over 20 years ago, we were among the first firms to develop sophisticated proprietary technology in our trading business. Today, we continue to leverage our technical ingenuity and operational excellence across several investment areas, spanning early-to-mid stage growth capital, operational control, trading and esports. Throughout the years, we've built and operated several financial technology firms and we continue to evolve.
The Information Security Engineer is a technical role focused on supporting the implementation, execution, and optimization of security controls within the company. Candidates must have technical competence and expertise of IT Security principles, security operations, techniques and technologies. A successful candidate utilizes business knowledge and technical experience to provide a secure environment for PEAK6 and affiliates.
As an Information Security Engineer, you'll be responsible for:

• Managing, maintaining security designs of critical enterprise information security infrastructure and the technology stack to ensure consistent performance. Supporting and troubleshooting those systems Conducting comprehensive security program analyses to identify business critical systems and developing effective risk mitigation measures for vulnerability and incident management programs to recommend corrective actions.
• Supporting the development of technical guidance for designing security capabilities for cloud technologies. Monitoring, analyzing and understanding SIEM logs.
• Defining security measures and reference architecture patterns and managing traceability between business and security strategy.
• Collaborating with Systems Architects across lines of business to continuously improve security design, development and deployment processes.
• Performing internal audits to assess security maturity and ensuring that security principles are applied correctly.
• Participating in security programs and initiatives related to compliance and helping interpret applicable standards and regulation requirements.
• Identifying, analyzing and resolving security deficiencies, serving as subject matter expert to ensure technologies adhere to regulatory standards.
• Evaluating 3rd party security risks and developing mitigating strategies.
• Evaluating common security exploits, network attacks, phishing techniques and performing basic malware analysis.
• Evaluating new technologies implementation to ensure that appropriate security controls are built into the system prior to implementation to production
• Quickly comprehending the functions and capabilities of new security technologies
• Technologies Preparing, collecting, and analyzing Information Security metrics-related materials and documentation
• Managing and executing Progress and Metrics Reporting with preparation and analysis of the weekly and monthly scheduled reports; delivering these reports to the Governance team for integration into overall metrics

You'll gain loads of experience in this role but before you do, you should have:

• Bachelor's degree
• Desirable Information Security Certifications (ex: CISSP)
• At least 2-5 years of technical engineering experience in the Information Security field
• Knowledge of Information Security technical and functional areas and the operation of key tools as they related to these areas
• Ability to assess vulnerability risk and applicability based on existing guidance
• Intermediate scripting abilities (Python, Powershell, or comparable methods for process improvement and efficiency)
• Demonstrated experience evaluating security statistics to identify patterns and produce metrics that can be used for strategic decision-making
• Familiar with standard security best practices
• Prospective candidates should be comfortable presenting to audiences of varying sizes and skillsets
• Able to work well under pressure and within short time constraints
• Excellent documentation, communication, and interpersonal skills
• Excellent analytical and problem-solving abilities
• Ability to prioritize and organize competing work demands
• Ability to quickly learn new processes and tools to find and manage software vulnerabilities
• Strong organization skills and attention to detail
• Must be able to communicate in a clear, concise, professional oral or written manner to be understood by customers, clients, co-workers, and other employees of the organization
• Must be able to perform under pressure and stressful situations
• May be required to be on call for production support 24x7

#LI-SD1