Top Cybersecurity Jobs in Chicago, IL

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Perform red team engagements, penetration tests, adversary emulation, and threat actor simulations across operating systems, applications, databases, and networks. Plan and execute assessments, identify vulnerabilities, produce executive and technical reports, provide security recommendations, and support customers during crisis scenarios. Collaborate with leadership and technical teams, improve information security programs, operate with an OPSEC mindset, and use automation, scripting, and AI technologies to enhance assessment effectiveness.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and maintain scalable cybersecurity data infrastructure, distributed systems, and tools supporting OverWatch threat hunting across trillions of events. Develop web services and processing pipelines, integrate research projects into production, improve analyst workflows, and operate highly available cloud systems. Responsibilities include DevOps ownership, on-call support, testing, code reviews, open-source collaboration, and working with a distributed remote team.

Serves as a technical advisor to strategic customers, supporting CrowdStrike Falcon planning, deployment, configuration, troubleshooting, optimization, integrations, and operational adoption. Provides guidance on security operations, threat hunting, incident management, vulnerability and asset management, and Falcon modules. Develops API-based solutions, collaborates with customer IT and Professional Services teams, delivers training, manages projects, and maintains trusted customer relationships. The role is remote and requires travel up to 20%.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Provides customer-facing cybersecurity consulting focused on threat emulation, exposure management, red teaming, vulnerability management, penetration testing, and technical risk mitigation. Uses SafeMind, Falcon, and AI-enabled capabilities to evaluate exposures, refine risk outputs, advise technical and executive audiences, improve service delivery, and mentor junior consultants. Requires advanced security assessment, infrastructure, networking, operating system, automation, and scripting expertise, with occasional travel.

Provides embedded technical consulting for government customers using the CrowdStrike Falcon platform. Responsibilities include customer advising, Falcon deployment and configuration, troubleshooting, module operationalization, integrations, scripting, vulnerability and asset management support, incident management guidance, threat hunting mentorship, project coordination, and government-focused technical reporting. The role operates in FedRAMP and DoD-accredited environments and requires cybersecurity expertise, consulting experience, U.S. work authorization, clearance eligibility, and up to 20% travel.

Leads a multi-team organization building AI-driven cybersecurity systems for endpoint and cloud environments. Owns technical strategy, roadmap, hiring, delivery, evaluation, and safe production deployment of AI models and autonomous defense agents. Oversees systems operating under strict endpoint resource limits and at cloud scale across trillions of events. Partners with engineering, product, threat intelligence, and executives while advancing security efficacy, reliability, and responsible AI adoption.

Monitor, triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments. Analyze EDR telemetry, logs, forensic artifacts, Microsoft 365 activity, and enterprise security data to identify compromises and support remediation. Communicate findings and recommendations to customers, contain threats such as business email compromise and adversary-in-the-middle attacks, and improve incident detection and response processes. The role requires technical troubleshooting, customer communication, foundational cybersecurity knowledge, and a 4x10 schedule including one weekend day.