Top Cyber Security Jobs in Chicago, IL

Leads security engineering architecture and strategy, including IAM, SSO, authentication, authorization, observability, and distributed event-based systems. Drives build-versus-buy decisions, improves security microservices and tooling, establishes engineering standards, and secures agentic AI infrastructure. Collaborates cross-functionally on priorities and tradeoffs while mentoring engineers, documenting practices, evaluating technologies, and advancing security across a cloud-based microservice architecture.

Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.

Leads and consolidates a centralized security architecture engineering organization supporting threat modeling, architecture automation, testing, quality, SRE, and DevOps platforms. Owns engineering strategy, technical architecture, capacity allocation, operating standards, delivery quality, production resilience, hiring, staffing, performance management, and career development. Partners with product leadership to prioritize investments, establish measurable outcomes, and align engineering resources with business value and risk reduction.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection systems. Develops automation for vulnerability management, detection, and compliance monitoring; advises on incident response and forensics; integrates security into enterprise platforms; evaluates security technologies; establishes engineering standards; and supports security tools. Requires at least five years of cybersecurity or IT experience, cloud experience, and experience implementing automated security solutions.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Designs, implements, and maintains global network and perimeter security infrastructure. Responsibilities include firewall rule analysis and optimization, security solution integration, network monitoring, troubleshooting, technical support, and collaboration on security projects with internal teams and data center partners. The role requires onsite work in Chicago at least three days weekly and occasional nighttime or weekend on-call availability.

Leads Prolaio’s enterprise information security and cloud operations strategy for an AI-driven healthcare platform. Owns cybersecurity, continuous compliance, cloud infrastructure, threat modeling, vulnerability management, identity and access management, incident response, vendor risk, and AI security. Establishes security-as-code and automated compliance frameworks supporting HITRUST, ISO, HIPAA, FDA, GxP, and privacy requirements while partnering with engineering, data, clinical, and executive teams.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Designs, implements, and improves enterprise security capabilities across endpoint, cloud, network, data protection, email security, vulnerability management, SIEM, SOAR, and Zero Trust environments. Owns major security platforms including Rapid7, Microsoft Defender, Microsoft Purview, Mimecast, and Zscaler. Develops scalable architectures, detection and automation workflows, vulnerability controls, email protections, and security integrations while partnering with infrastructure, network, cloud, application engineering, security operations, and MDR teams.

Leads cybersecurity development and automation teams, setting strategy and delivery priorities for secure applications, AI-enabled workflows, integrations, and enterprise security automation. Oversees architecture, governance, auditability, operational resilience, stakeholder alignment, and delivery across vulnerability management, threat response, control validation, and security operations. Recruits and develops technical talent while establishing responsible AI engineering practices and scalable automation capabilities in a regulated environment.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Assists with designing, implementing, monitoring, configuring, and maintaining information security and risk management infrastructure. Supports requirements definition, root cause analysis, technical training, project delivery, compliance, and security systems administration. The role requires familiarity with operating systems, software administration, network security technologies, endpoint protection, firewalls, encryption, SIEM, DLP, and relevant security frameworks and regulations.

Design and implement enterprise security architecture aligned with NIST, ISO 27001, and CIS standards. Build security data aggregation, normalization, and automation pipelines using VBScript, Python, and PowerShell. Lead tooling rationalization initiatives, consolidate security telemetry, reduce operational costs, and establish enterprise monitoring and incident response programs with detection, escalation, and investigation procedures.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Secure Windows products and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Build reusable security-review tools, identify vulnerabilities in operating-system features and native applications, investigate attack vectors, and collaborate with Windows engineering teams to implement scalable defenses. The role also involves engaging with external security researchers and communicating the business value of security investments.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.