Top Security Engineer Jobs in Chicago, IL

Responsible for ensuring security and integrity in technology operations, providing expertise in security engineering, and collaborating with teams to embed security measures in API design and deployment.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead expansion and maintenance of a Zero Trust security program across hybrid on-premises and cloud environments. Manage identity and access controls, deploy and tune SIEM/EDR/XDR/IAM tooling, automate security operations, reduce alert fatigue, and collaborate with IT, DevOps, and business teams to strengthen enterprise security across endpoints, cloud, SaaS, identity, network, and data protection.

Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Design, implement, and manage enterprise security solutions including endpoint, network, SaaS, and cloud protections. Investigate malware and advanced threats, expand SIEM detections, deploy DLP, perform forensics and vulnerability remediation, secure IAM/SSO/MDM, automate detections and reporting, participate in on-call incident response, and mentor junior security engineers.

The Cloud Security Senior Engineer designs and maintains security controls across AWS and Azure, conducts assessments, and collaborates with engineering teams to enhance cloud security.

The Senior Security Engineer will manage customer identity platforms, ensuring secure authentication and access across products, while supporting integration and optimizing performance.

As a Product Security Engineer, you'll develop secure tools for engineering teams, conduct security reviews, and automate security processes to enhance Cedar's healthcare technology solutions.

Hybrid role responsible for testing and certifying fire alarm, access control, and smoke detection systems to UL standards. Manages certification projects, coordinates testing and lab technicians, communicates technical issues with clients, prepares reports, develops test programs and procedures, and supports continuous improvement and special test methods.