Cybersecurity Engineer

Illinois Municipal Retirement Fund (IMRF); Oak Brook (IL); On-site; USD 98,000 - 108,000; Full time

Benefits offered by this job

Pension benefits

Medical and dental insurance

35-hour work week

One remote day per week

Paid vacation and holidays

Tuition reimbursement

Business casual attire

Job summary

IMRF, headquartered in Oak Brook, Illinois, seeks a Cybersecurity Engineer to ensure SOC1 and security best practices across the System Development Lifecycle, aligned with NIST and regulatory requirements. The role involves monitoring security consoles, managing access, and driving vulnerability remediation.

The engineer will implement, maintain, and enhance security tools such as SIEM, endpoint protection, and IAM; participate in risk assessments and DR readiness; stay current with threats and

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or similar discipline.
• Currently certified in GSOC OR CompTIA Security+ OR CompTIA CySA+ OR similar discipline
• 3+ years experience working with enterprise security tools and technologies

Responsibilities

• Monitor security consoles (SIEM, NAC, Firewall, Email, A/V, vulnerability) to log devices, investigate activity, and determine remediation options.
• Provide team support analyzing and responding to escalated cybersecurity issues/incidents.
• Provision user and vendor access to Line of Business applications per business roles.
• Assist in vulnerability management activities, including scanning, prioritization, and remediation tracking.
• Assess, validate, and implement system patches across all IMRF environments on a monthly or as-needed basis.

Skills

Analytical thinking

Incident response

Event monitoring

Automation scripting

Security frameworks

Security tools

Education

Bachelor's degree in Cybersecurity/InfoSec

Security certifications (GSOC/CompTIA Security+/CySA+)

Tools

SIEM

NAC

Firewalls

Endpoint protection

IAM solutions

Python

PowerShell

Job description

The Cybersecurity Engineer will be primarily responsible for ensuring IMRF’s compliance with SOC1, Security Best Practices, NIST, and enforcing the security of all IMRF systems as part of our Systems Development Lifecycle.

Essential Duties and Responsibilities:

• Monitor various security consoles (SIEM, NAC, Firewall, Email, A/V, vulnerability etc.) to log devices/systems, investigate/alert on unauthorized activity, and determine remediation options; maintaining an inventory of authorized and unauthorized devices.
• Provide team support analyzing and responding to escalated cybersecurity issues/incidents as requested by IS leadership.
• Provision user and vendor access to Line of Business applications, matching established business roles.
• Assist in vulnerability management activities, including scanning, prioritization, and remediation tracking.
• Assess, validate, and implement system patches across all IMRF environments on a scheduled monthly basis or as necessary to address security vulnerabilities.
• Aggregate audit scans and patch management audit reports to ensure a comprehensive inventory of allowed software/hardware.
• Support the configuration, maintenance, and enhancement of security tools: SIEM, endpoint protection, and identity access management solutions.
• Perform SME duties including the implementation of cybersecurity projects and new tools/technologies.
• Stay current with cybersecurity trends, emerging threats, and regulatory requirements, sharing insights with the security team. Provide cross-training as needed to team members to ensure transfer of knowledge.
• Stay abreast with communication from established threat intelligence sources, to proactively threat hunt within IMRF’s systems and prevent potential breaches/close security gaps.
• Assist the Help Desk serving as an escalation point in solving problems related to system security and network access. Provide additional resource coverage as needed for special events.
• Participate in cybersecurity risk assessments and compliance initiatives to ensure adherence to security policies and frameworks.
• Participate in regular training and development activities to improve cybersecurity knowledge and skills.
• Develop and maintain cybersecurity documentation and procedures.
• Implement, review, & verify that our Disaster Recovery cybersecurity is implemented the same as our Oak Brook site. This includes participating in validation of all IMRF systems availability ( part of the CIA triad ).
• Perform other duties as required.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience

• Bachelor's degree in Cybersecurity, Information Security, or similar discipline
• Currently certified in GSOC OR CompTIA Security+ OR CompTIA CySA+ OR similar discipline
• 3+ years experience working with enterprise security tools and technologies

AND

Additional qualities/technical skills and experience preferred:

• Strong analytical and problem-solving skills, with experience in cybersecurity event monitoring and incident response.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation tasks.
• Knowledge of security frameworks and standards (e.g., NIST, CIS, ISO 27001).
• Familiarity with security technologies: SIEM, firewalls, endpoint protection, and IAM solutions.

Salary and Benefits

The expected annual salary range for this role is $98,254- $108,079. Please note the salary information is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations. The range listed is just one component of IMRF's total compensation package for employees.

Other factors include the following benefits:

• Pension, death, and disability benefits as a member of IMRF
• Generous insurance benefits, including medical and dental
• 35-hour base work week, Monday-Friday. Abilty to work one remote day a week.
• Paid vacation, paid sick, 12-13 paid holidays and 2 personal days
• Tuition reimbursement
• Business casual attire