Top Cybersecurity Jobs in Chicago, IL

Lead architecture and technical strategy for a unified telemetry and observability platform spanning endpoint collection SDKs to cloud ingestion and analytics. Design high-performance, resource-constrained, crash-survivable telemetry systems across Windows, macOS, and Linux; drive data governance, privacy/PII handling, and backward-compatible platform evolution. Mentor and lead distributed engineering teams.

Pre-sales technical lead for CrowdStrike Falcon NG-SIEM: own technical relationships through the sales cycle, demonstrate capabilities, answer technical questions, advise customers, enable expansions, gather product feedback, collaborate cross-functionally, and help define go-to-market strategy and integrations to grow NG-SIEM adoption.

Serve as the technical bridge in sales: identify customer requirements, design and demonstrate security solutions, prepare proposals/RFP responses, provide product feedback to engineering, develop technical marketing materials, and build customer and partner relationships while staying current on security trends.

Delivers strategic cybersecurity advisory engagements for management-level clients. Assesses and develops security and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The consultant also contributes to thought leadership and methodology development while managing multiple projects independently and traveling to client sites up to 30% of the time.

Design, build, and maintain distributed cloud services to support advanced threat detection. Collaborate with security, data science, and engineering teams to integrate capabilities into the Falcon platform, ensure production reliability, and leverage AI/LLMs to improve detection and automation. Mentor peers and contribute to scalable, high-availability system architecture.

Perform real-time detection, containment, and remediation of security incidents across Windows, macOS, and Linux. Conduct malware and forensic analysis, develop detection processes and countermeasures, produce customer communications, and contribute thought leadership and public-facing content.

Design and train LLMs and agentic systems for cybersecurity using RLHF/RLAIF and supervised fine-tuning. Build agent architectures, tooling, retrieval/memory, and evaluation pipelines with rigorous statistical benchmarking. Optimize prompts and inference, collaborate with engineers to productionize prototypes, and drive research on agent planning, safety, and reliability.

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements, emulating adversary TTPs against customer cloud environments, collaborate with client SOC/IR teams, manage engagements end-to-end, develop automation and tooling for adversary emulation, and recommend long-term enhancements to improve cloud detection and response.

Lead planning, deployment, and operational support for CrowdStrike Falcon cloud security modules (CWP, CSPM, ASPM, SSPM). Perform implementations, scripting, IaC, container and CI/CD integrations, troubleshooting, customer training, mentorship, cross-team coordination, and support incident response and compromise assessments.

Perform proactive and active threat hunting across government cloud environments, analyze adversary activity, develop and implement detections, conduct intrusion and forensic analysis, contribute to threat intelligence and detection engineering, and communicate findings to technical and executive stakeholders while enhancing Falcon platform capabilities.