Top Cybersecurity Jobs in Chicago, IL

Develop and maintain high-fidelity CrowdStrike Next-Gen SIEM detection rules for managed detection and response. Conduct threat research and hunting, analyze emerging adversary tactics, test and deploy detections as code, review detection quality, and collaborate on data parsing and normalization. Build automation and utilities using AI-assisted workflows, maintain documentation, and participate in an on-call rotation.

Delivers customer-facing threat emulation, exposure management, red teaming, vulnerability management, penetration testing, and technical risk consulting services. Uses SafeMind, Falcon, generative AI, and agentic technologies to evaluate exposures, refine risk outputs, recommend mitigations, and support service operations. Presents findings to technical and executive audiences, coordinates customer delivery, improves technical capabilities, and mentors junior team members.

Develop and operate scalable cybersecurity systems for Falcon Complete, enabling analysts to triage, remediate, and prevent threats. Responsibilities include implementing product enhancements, designing reliable microservices and data pipelines, improving monitoring, automating operations, collaborating with stakeholders, and participating in 24/7 on-call rotations. The role requires cloud-native development, distributed systems expertise, database and messaging-system knowledge, container orchestration experience, and practical use of AI technologies.

Deploys, configures, optimizes, and supports CrowdStrike Falcon’s AI-powered detection and response capabilities. The role tunes machine learning models, develops security automation playbooks, troubleshoots customer environments, integrates Falcon with existing tools, supports threat hunting and forensic analysis, and develops AI training and customer-facing materials. Requires extensive IT deployment, endpoint, security automation, operating system, AI/ML, scripting, and customer consulting experience, with travel up to 25%.

Analyzes the Security for AI competitive landscape, including AI detection and response, generative AI security, autonomous agents, prompt injection, and data leakage. Partners with Product, Sales, Marketing, Strategy, and senior leaders to guide product roadmaps, go-to-market strategy, deal support, sales tactics, and competitive positioning. Conducts win/loss analysis and translates complex AI and cybersecurity concepts into executive and field-actionable guidance.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Conduct incident response engagements, intrusion investigations, threat hunting, and host or network forensics across Windows, Mac, and Linux. Analyze malware and network activity, support remediation planning, and investigate targeted attacks. Prepare written and verbal findings for customers, regulators, management, and legal counsel. Consultants also collaborate with project leaders and internal teams while using AI technologies to improve workflows and decision-making.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Lead incident response engagements, investigate intrusions and advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, develop remediation plans, communicate findings to executives and legal stakeholders, mentor teams, and contribute industry thought leadership. The role requires strong consulting, project management, communication, and cybersecurity expertise, with travel of up to 30%.

Conduct incident response engagements and intrusion investigations for major organizations. Perform host and network forensics across Windows, macOS, and Linux; hunt for threat actors; analyze network data and malware; support remediation planning; and prepare technical reports, presentations, and recommendations for customers, regulators, legal counsel, and executives.