Top Security Engineer Jobs in Chicago, IL

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

Responsible for ensuring security and integrity in technology operations, providing expertise in security engineering, and collaborating with teams to embed security measures in API design and deployment.

As a Product Security Engineer, you'll develop secure tools for engineering teams, conduct security reviews, and automate security processes to enhance Cedar's healthcare technology solutions.

The Security Engineer will design, build, and enhance security tools and frameworks, analyze security challenges, and contribute to AI/ML security research. Responsibilities include software development, security code review, and technical communication.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Manage and improve vulnerability management, asset visibility, and cloud security across hybrid and multi-cloud environments. Operate tools (Wiz, Rapid7), maintain asset inventories, triage and track vulnerabilities, coordinate remediation with Engineering/SRE/IT, support incident investigations and on-call rotation, maintain compliance evidence and runbooks, and contribute to program improvements and reporting.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

The Sr. Infrastructure Security Engineer is responsible for protecting patient data, enhancing cloud infrastructure security, and collaborating with engineering teams to implement effective security practices.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Senior individual contributor owning cloud security architecture for GCP. Design edge/perimeter defenses with Cloudflare and Cloud Armor, build policy-as-code and secure Terraform modules, lead threat modeling and security reviews, advance cloud detection and incident response, translate compliance requirements into technical controls, mentor engineers, and serve as the cloud security technical authority.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Lead penetration testing and vulnerability remediation for web, mobile, and medical device applications, ensuring compliance with healthcare regulations.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

The Staff Product Security Engineer will enhance security in product development, conduct threat modeling, review code, automate processes, and advise on security requirements.

The Solutions Engineer will drive security and privacy evaluations for enterprise clients, manage compliance questionnaires, advocate for security aspects in sales, and liaise with internal security teams to address technical inquiries and ensure deal momentum.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.