Sr Info Security Engineer

Role Overview

The Senior Information Security Engineer will be a part of Cboe’s Security Engineering and Operations Team to manage, deploy and configure various information security technologies including; Security Incident and Event Management (SIEM), Security Orchestration and Automation Response (SOAR / Case Management), Endpoint Detection and Response (EDR), Secure Email Gateways, and Email and Endpoint Data Loss Prevention (DLP) to provide optimal security controls across multiple business environments.

Responsibilities

• Provide expert recommendations and best practices to security managers, technical managers, and stakeholders including legal and regulatory teams.
• Design, implement, and govern comprehensive security solutions across multiple platforms utilizing a variety of security tools, programming languages, and services, operating with near-complete autonomy.
• Develop, implement, and monitor comprehensive security solutions utilizing a variety of security tools, programming languages, and services with minimal supervision required.
• Automate repetitive tasks to enhance efficiency and scalability of security operations.
• Normalize and integrate diverse technologies to streamline analysis and response capabilities.
• Document, educate and mentor team members on the use of complex security products and services.
• Identify and assess risks within the organization’s security posture and provide detailed recommendations for potential solutions.
• Innovate and create new methodologies to resolve existing production security issues.
• Evaluate emerging technologies and assess their relevance and potential impact on our security posture.
• Continuously assess and test the effectiveness of security controls and recommend improvements.
• Act as a senior-level technical resource within the security team, providing guidance and mentorship to junior team members.
• Collaborate with cross-functional teams to integrate security into the development lifecycle and operational processes.
• Aid in security assessments and audits, ensuring compliance with internal policies and external regulations.
• Aid in escalated incident response activities, including containment, investigation, and recovery efforts.
• Stay current with industry trends, security standards, and best practices to ensure our systems remain secure against evolving threats.

Requirements

• Proven senior-level experience (minimum 5 years) in information security or 3 years information security experience with an additional to 2-3 years IT experience (System Administration, Network Administration), with a strong focus on engineering and operations.
• Experience and knowledge on current security technologies (Databahn, NXlog, Google Secops, Bindplane, ProofPoint).
• Proficiency in scripting and automation for security operations.
• Experience with Linux/Unix and Windows administration, including Active Directory (AD) and EntraID.
• Proficiency with the Microsoft Security Stack (Defender for Endpoint, Defender for Identity, Defender for CloudApps, Purview DLP, Intune).