Required Skills & Experience
Proven senior-level experience (minimum 5 years) in information security or 3 years information security experience with an additional to 2-3 years IT experience (System Administration, Network Administration), with a strong focus on engineering and operations.
Experience and knowledge on current security technologies (Databahn, NXlog, Google Secops, Bindplane, ProofPoint)
Proficiency in scripting and automation for security operations.
Experience with Linux/Unix and Windows administration, including Active Directory (AD) and EntraID.
Proficiency with the Microsoft Security Stack (Defender for Endpoint, Defender for Identity, Defender for CloudApps, Purview DLP, Intune)
Nice to Have Skills & Experience
Bachelor's Degree in Cybersecurity or Computer Science
System Administration experience in Windows or Linux
Proven ability to script and automate tasks
Specific experience with Google Secops SIEM, the Microsoft Security Stack, or ProofPoint Email Security Services
CISSP, CASP or other related security certifications
Job Description
Role Overview
The Senior Information Security Engineer will be a part of Cboe’s Security Engineering and Operations Team to manage, deploy and configure various information security technologies including; Security Incident and Event Management (SIEM), Security Orchestration and Automation Response (SOAR / Case Management), Endpoint Detection and Response (EDR), Secure Email Gateways, and Email and Endpoint Data Loss Prevention (DLP) to provide optimal security controls across multiple business environments. This may include managing and optimizing custom configurations for individual customers. This individual will be required to perform tuning of security solutions, manage applying patches and performing upgrades to various security platforms. The ideal candidate must be well versed in understanding the IT landscape including security, infrastructure, network, client, server, emerging technology standards and trends and will be involved in strategy, design, and engineering to contribute to the development of secure solutions.
Your responsibilities will be:
Provide expert recommendations and best practices to security managers, technical managers, and stakeholders including legal and regulatory teams.
Develop, implement, and monitor comprehensive security solutions utilizing a variety of security tools, programming languages, and services with minimal supervision required.
Automate repetitive tasks to enhance efficiency and scalability of security operations.
Normalize and integrate diverse technologies to streamline analysis and response capabilities.
Document, educate and mentor team members on the use of complex security products and services. Identify and assess risks within the organization’s security posture and provide detailed recommendations for potential solutions.
Innovate and create new methodologies to resolve existing production security issues.
Evaluate emerging technologies and assess their relevance and potential impact on our security posture.
Continuously assess and test the effectiveness of security controls and recommend improvements.
Act as a senior-level technical resource within the security team, providing guidance and mentorship to junior team members.
Collaborate with cross-functional teams to integrate security into the development lifecycle and operational processes.
Assist with security assessments and audits, ensuring compliance with internal policies and external regulations.
Assist with escalated incident response activities, including containment, investigation, and recovery efforts.
Stay current with industry trends, security standards, and best practices to ensure our systems remain secure against evolving threats.