Cybersecurity Engineer 4

Cullerton Group; Chicago (IL); Hybrid; USD 8,817,000 - 14,603,000; Full time

Benefits offered by this job

Vision insurance

Dental insurance

Health insurance

401k

Holiday pay

Job summary

Cullerton Group is hiring a Lead Cybersecurity Engineer to strengthen secure-by-design practices across enterprise apps and cloud environments. This role supports secure software development, app security testing and remediation coordination with developers, architects and leaders.

You will enable automated security testing, perform threat modeling, and oversee vulnerabilities across AWS/Azure, APIs and CI/CD workflows, with a focus on secure DevOps integration.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT or related field with 8+ years security experience (master's +6 years also qualifies).
• Strong expertise in identifying and remediating vulnerabilities per OWASP, CWE/CVE, SANS Top 25.
• Experience with security architecture, threat modeling, risk analysis, defense in depth, IAM and API security.
• Cloud security experience with AWS or Azure.
• Hands-on security automation and scripting experience.
• Excellent written and verbal communication for non-security audiences.

Responsibilities

• Analyze vulnerabilities from CodeQL, Rapid7, pen tests, bug bounties and other sources.
• Advise teams on secure design, remediation, risk decisions and security reviews.
• Enable automated security testing at repo and app levels (SCA, SAST, DAST).
• Coordinate penetration testing and security assessments; manage findings to remediation.
• Evaluate security risks across AWS/Azure, IaC, APIs and dev workflows.
• Perform threat modeling, risk analysis and defense-in-depth reviews across SDLC.
• Use scripting to improve security processes, monitoring and defect tracking.
• Maintain ownership of applications and collaborate to close security gaps.

Skills

Application security

Threat modeling

Vulnerability assessment

Security architecture

IAM

API security

Secure SDLC

Scripting/automation

Education

Bachelor's degree in CS/C Cybersecurity/IT

Master's degree (advantage)

Tools

CodeQL

Rapid7

SCA

SAST

DAST

Job description

Cullerton Group has a new opportunity for a Cybersecurity Engineer 4. The work will be done hybrid at the Chicago, IL; Peoria, IL; or Dallas, TX office, with Wednesdays currently required onsite. This position is expected to transition to five days onsite, so candidates must be local and prepared for full-time in-office work. This is a long-term position that can lead to permanent employment with our client. Compensation is up to $106/hour + full benefits (vision, dental, health insurance, 401k, and holiday pay).

Job Summary

We are seeking a Lead Cybersecurity Engineer to strengthen secure-by-design practices across enterprise applications and cloud environments. This role will support secure software development lifecycle practices, application security testing, vulnerability management, and the integration of security into DevOps processes. The engineer will partner closely with developers, architects, product owners, and business leaders to identify security risks, recommend practical remediation strategies, and ensure applications meet enterprise security requirements.

Key Responsibilities

• Analyze, validate, communicate, and manage application security vulnerabilities identified through CodeQL, Rapid7, penetration testing, bug bounty programs, and other automated or manual sources.
• Advise software engineers, architects, product owners, and leaders on secure application design, remediation strategies, risk decisions, and security review processes.
• Enable and monitor automated security testing tools at the repository and application levels, including SCA, SAST, and DAST solutions.
• Coordinate penetration testing and security assurance assessments by collecting scope and access requirements and managing findings through remediation.
• Evaluate security risks across AWS and Azure environments, Infrastructure as Code, APIs, identities, and application development workflows.
• Perform threat modeling, vulnerability assessments, risk analysis, and defense-in-depth reviews throughout the software development lifecycle.
• Use scripting and automation to improve security processes, monitoring, defect tracking, and developer enablement.
• Maintain ownership of assigned applications and collaborate directly with development teams to resolve security gaps.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field with at least eight years of information security experience; a master's degree with at least six years of relevant experience may also qualify.
• Strong application security expertise, including vulnerability identification and remediation based on OWASP, CWE/CVE, and SANS Top 25 guidance.
• Experience with security architecture, threat modeling, vulnerability assessment, risk analysis, defense in depth, IAM, API security, and secure SDLC practices.
• Cloud security experience with AWS, Microsoft Azure, or both.
• Experience with application security tools and processes involving SCA, SAST, and DAST.
• Hands-on experience implementing security automation and scripting.
• Excellent written and verbal communication skills, including the ability to explain highly technical security concepts to non-security audiences.
• Ability to coordinate multiple technical teams and manage competing security priorities.
• Must be local to the Chicago, Peoria, or Dallas office and willing to transition to five days onsite when required.

Preferred Qualifications

• Professional certification such as CISSP, CCSP, CSSLP, GISCP, GWAPT, GWEB, AWS Solutions Architect, or AWS Certified Security.
• Experience securing web services, APIs, cloud-native applications, and Infrastructure as Code.
• Familiarity with CodeQL, Rapid7 Web Application Security, penetration testing, and bug bounty programs.
• AI fluency and an understanding of emerging AI-related security considerations.
• Demonstrated employment stability and experience supporting enterprise-scale security programs.

Why This Role?

This position offers the opportunity to lead meaningful application and cloud security initiatives within a large, global organization. You will work directly with engineering teams to improve secure development practices, reduce security risks, and influence how enterprise applications and services are designed. Cullerton Group provides a professional environment, comprehensive benefits, and strong potential for long-term career growth.