Top Cybersecurity Jobs in Chicago, IL

Lead complex incident response engagements, conduct host and network forensics, investigate intrusions and malware, hunt advanced threats, develop remediation plans, and communicate findings to executives, regulators, legal counsel, and customers. The role also requires team leadership, project management, cloud incident response knowledge, thought leadership, and travel up to 30%.

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Leads delivery of cybersecurity training across CrowdStrike technologies, manages technical instructors, and oversees coaching, performance, scheduling, budgets, reporting, and resource allocation. Partners with sales and internal teams to scope customer engagements, recommend training, and improve enablement and revenue outcomes. Serves as a technical training subject matter expert, develops courses, analyzes training effectiveness and KPIs, and communicates with executive and technical audiences. Requires cybersecurity expertise, training management experience, LMS and virtual delivery platform proficiency, project management, and occasional travel.

Leads the Cloud Detection Platform organization, strategy, architecture, roadmap, and multiple engineering teams. Owns large-scale detection engines, content delivery infrastructure, reliability, latency, cost, SLOs, capacity, and quota management. Drives unified detection architecture, safe content deployment, testing, observability, and cross-functional roadmap execution while managing organizational planning, talent development, and operational excellence.

Manage a team of TPRM analysts to run the vendor risk lifecycle, improve tooling and automation (ServiceNow TPRM, AI), perform assessments and audits, develop TPRM policies aligned to frameworks (NIST/ISO/SOC 2), partner with procurement/legal/IT, track KPIs, and support audit and reporting to leadership.

Plans, deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications. Provides troubleshooting, integrations, vulnerability and asset management support, API-based scripting, customer project planning, and collaboration with IT and incident response teams. Develops customer-facing materials, leads skills workshops, mentors colleagues, and may travel up to 25%.