Top Cybersecurity Jobs in Chicago, IL

Perform real-time detection, containment, and remediation of security incidents across Windows, macOS, and Linux. Conduct malware and forensic analysis, develop detection processes and countermeasures, produce customer communications, and contribute thought leadership and public-facing content.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Design and train LLMs and agentic systems for cybersecurity using RLHF/RLAIF and supervised fine-tuning. Build agent architectures, tooling, retrieval/memory, and evaluation pipelines with rigorous statistical benchmarking. Optimize prompts and inference, collaborate with engineers to productionize prototypes, and drive research on agent planning, safety, and reliability.

The role involves managing strategic partnerships with cloud providers, enhancing offerings on AWS Marketplace, and driving business growth through program management and cross-functional collaboration.

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements, emulating adversary TTPs against customer cloud environments, collaborate with client SOC/IR teams, manage engagements end-to-end, develop automation and tooling for adversary emulation, and recommend long-term enhancements to improve cloud detection and response.

Lead and manage a Red Team to deliver generative AI–enabled source code review and adversary emulation engagements. Oversee operations, vendor relationships, reporting, penetration testing, and mentoring. Coordinate with leadership and sales to scope engagements, improve security programs, and support crisis response and automation efforts.

Support Falcon Intel Recon customers by triaging and escalating findings, guiding customers on intelligence output, advocating customer feedback to product teams, and leading process improvements to maximize customer success and renewals.

Serve as a trusted advisor implementing Falcon Next-Gen SIEM and related log management/SOAR capabilities. Deliver integrations, onboarding, searches, dashboards, and AI-assisted investigations. Provide technical guidance, knowledge transfer, customer-facing consulting, and product feedback to influence roadmap and operationalize NG-SIEM in customer environments.

Lead and grow a resident professional services team delivering CrowdStrike Falcon platform engagements (Endpoint, Identity, Cloud, Next‑Gen SIEM). Manage pre-sales scoping, deployments, project delivery, documentation, and cross-functional collaboration to maximize customer value and optimize delivery using automation and AI. Travel up to 25%.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.