Cybersecurity Engineer

IMRF; Oak Brook (IL); On-site; USD 98,000 - 108,000; Full time

Benefits offered by this job

Pension plan

Medical and dental insurance

35-hour work week with one remote day

Vacation and holidays

Tuition reimbursement

Casual attire

Job summary

IMRF is seeking a Cybersecurity Engineer to ensure SOC1 and NIST-aligned security across its systems. The role supports the SDLC, patch management, and threat intelligence to prevent breaches.

Responsibilities include monitoring SIEMs and security tools, managing access, handling incidents, and maintaining documentation. A hybrid work setup with some remote flexibility is available.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• 3+ years experience with enterprise security tools.
• Relevant certifications (GSOC, Security+, CySA+).

Responsibilities

• Monitor security consoles (SIEM, NAC, Firewall, Email, A/V, vulnerability) and log devices/systems.
• Analyze escalated cybersecurity issues and assist incident response.
• Provision user and vendor access to Line of Business applications.
• Assist vulnerability management: scanning, prioritization, remediation tracking.
• Apply patches across IMRF environments on schedule and as needed.

Skills

Analytical skills

Incident response

Problem solving

Automation scripting

Education

Bachelor's degree in Cybersecurity or Information Security

GSOC certification

CompTIA Security+

CompTIA CySA+

Tools

SIEM

Firewalls

Endpoint protection

IAM solutions

Job description

Internal applicants must apply by 10/13/2026

The Cybersecurity Engineer will be primarily responsible for ensuring IMRF’s compliance with SOC1, Security Best Practices, NIST, and enforcing the security of all IMRF systems as part of our Systems Development Lifecycle.

Essential Duties and Responsibilities:

• Monitor various security consoles (SIEM, NAC, Firewall, Email, A/V, vulnerability etc.) to log devices/systems, investigate/alert on unauthorized activity, and determine remediation options; maintaining an inventory of authorized and unauthorized devices.
• Provide team support analyzing and responding to escalated cybersecurity issues/incidents as requested by IS leadership.
• Provision user and vendor access to Line of Business applications, matching established business roles.
• Assist in vulnerability management activities, including scanning, prioritization, and remediation tracking.
• Assess, validate, and implement system patches across all IMRF environments on a scheduled monthly basis or as necessary to address security vulnerabilities.
• Aggregate audit scans and patch management audit reports to ensure a comprehensive inventory of allowed software/hardware.
• Support the configuration, maintenance, and enhancement of security tools: SIEM, endpoint protection, and identity access management solutions.
• Perform SME duties including the implementation of cybersecurity projects and new tools/technologies.
• Stay current with cybersecurity trends, emerging threats, and regulatory requirements, sharing insights with the security team. Provide cross-training as needed to team members to ensure transfer of knowledge.
• Stay abreast with communication from established threat intelligence sources, to proactively threat hunt within IMRF’s systems and prevent potential breaches/close security gaps.
• Assist the Help Desk serving as an escalation point in solving problems related to system security and network access. Provide additional resource coverage as needed for special events.
• Participate in cybersecurity risk assessments and compliance initiatives to ensure adherence to security policies and frameworks.
• Participate in regular training and development activities to improve cybersecurity knowledge and skills.
• Develop and maintain cybersecurity documentation and procedures.
• Implement, review, & verify that our Disaster Recovery cybersecurity is implemented the same as our Oak Brook site. This includes participating in validation of all IMRF systems availability ( part of the CIA triad ).
• Perform other duties as required.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience

• Bachelor's degree in Cybersecurity, Information Security, or similar discipline

OR

Currently certified in GSOC OR CompTIA Security+ OR CompTIA CySA+ OR similar discipline

AND

• 3+ years experience working with enterprise security tools and technologies

Additional qualities/technical skills and experience preferred:

• Strong analytical and problem-solving skills, with experience in cybersecurity event monitoring and incident response.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation tasks.
• Knowledge of security frameworks and standards (e.g., NIST, CIS, ISO 27001).
• Familiarity with security technologies: SIEM, firewalls, endpoint protection, and IAM solutions.

Salary and Benefits

The expected annual salary range for this role is $98,254- $108,079. Please note the salary information is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations. The range listed is just one component of IMRF's total compensation package for employees.

Other factors include the following benefits:

• Pension, death, and disability benefits as a member of IMRF
• Generous insurance benefits, including medical and dental
• 35-hour base work week, Monday-Friday. Abilty to work one remote day a week.
• Paid vacation, paid sick, 12-13 paid holidays and 2 personal days
• Tuition reimbursement
• Business casual attire