Cybersecurity & Network Engineer

LHH; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

LHH is seeking a hands-on Cybersecurity & Network Engineer to secure and support a growing IT environment across on-prem and cloud. The role blends network engineering, infrastructure security, cloud identity security, vulnerability management, and cybersecurity compliance.

The ideal candidate is comfortable working across traditional IT infrastructure and modern security technologies, troubleshooting issues while strengthening the organization's security posture through Zero Trust and defense

Qualifications

• Bachelor's degree or equivalent professional experience.
• 3–5+ years in cybersecurity, network engineering, or related field.
• Strong networking fundamentals including TCP/IP, DNS, DHCP, VLANs, routing, VPNs, and firewall administration.
• Experience with enterprise network environments.
• Familiarity with BGP/OSPF routing.
• Experience with Windows Server, AD, Microsoft 365, Azure, Entra ID.
• Understanding of vulnerability management, incident response and cyber threats.
• Familiarity with NIST, CMMC, CIS.

Responsibilities

• Manage and enhance security controls across network, server, endpoint, cloud, and application environments.
• Monitor security alerts and investigate vulnerabilities, unusual activity, and potential incidents.
• Support security platforms such as firewalls, EDR, SIEM, identity security, and vulnerability tools.
• Perform vulnerability assessments and remediate issues with internal teams.
• Assist with incident response, security hardening, access controls, and ongoing improvements.
• Apply Zero Trust, least privilege, network segmentation, and defense in depth principles.
• Configure, secure, maintain, and troubleshoot switches, routers, firewalls, wireless, and VPNs.
• Support LAN/WAN, VLANs, routing, remote access, site-to-site connectivity, and cloud networking.
• Diagnose network performance, connectivity, and security issues with monitoring tools.
• Maintain network documentation and participate in upgrades, resiliency planning, and disaster recovery.
• Participate in risk assessments and security control reviews.
• Maintain policies, procedures, documentation, and compliance evidence.
• Support audits and third-party risk reviews.

Skills

Networking fundamentals

TCP/IP, DNS, DHCP

VPNs & firewall administration

Incident response

Documentation & communication

Troubleshooting

Zero Trust concepts

Education

Bachelor's degree in Cybersecurity, IT, CS, or related discipline

Tools

Windows Server

Active Directory

Azure

Microsoft 365

SIEM

Vulnerability management tools

Job description

We are seeking a hands-on Cybersecurity & Network Engineer to help secure and support a growing IT environment. This role blends network engineering, infrastructure security, cloud and identity security, vulnerability management, and cybersecurity compliance.

The ideal candidate is comfortable working across both traditional IT infrastructure and modern security technologies and can troubleshoot technical issues while helping strengthen the organization's overall security posture.

Key Responsibilities

Cybersecurity & Security Operations

• Manage and enhance security controls across network, server, endpoint, cloud, and application environments.
• Monitor security alerts and investigate vulnerabilities, unusual activity, and potential security incidents.
• Support security platforms such as firewalls, endpoint detection and response, SIEM, identity security, and vulnerability management tools.
• Perform vulnerability assessments and work with internal teams to prioritize and remediate security issues.
• Assist with incident response, security hardening, access controls, and ongoing security improvements.
• Apply principles such as Zero Trust, least privilege, network segmentation, and defense in depth.
• Configure, secure, maintain, and troubleshoot switches, routers, firewalls, wireless infrastructure, and VPN solutions.
• Support LAN/WAN environments, VLANs, routing, remote access, site-to-site connectivity, and cloud networking.
• Diagnose network performance, connectivity, and security issues using monitoring and troubleshooting tools.
• Maintain network documentation and participate in infrastructure upgrades, resiliency planning, and disaster recovery efforts.
• Participate in cybersecurity risk assessments and security control reviews.
• Help maintain policies, procedures, technical documentation, and compliance evidence.
• Support security and compliance programs aligned with frameworks such as NIST, CMMC 2.0, and CIS Controls.
• Identify control gaps and partner with technical teams on remediation efforts.
• Assist with cybersecurity audits, third-party risk reviews, customer security assessments, and related documentation.

Cloud, Identity & Application Security

• Help secure Microsoft-based cloud and identity environments, including Microsoft 365, Azure, Entra ID, and SharePoint.
• Support MFA, Conditional Access, identity protection, access management, and other identity security controls.
• Evaluate security risks involving SaaS applications, enterprise systems, APIs, and third-party integrations.
• Partner with infrastructure, application, and development teams to address vulnerabilities and configuration weaknesses.
• Contribute to security initiatives involving both traditional IT environments and operational technology.
• Identify opportunities to improve security monitoring and automate repetitive security processes.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent professional experience.
• Approximately 3–5+ years of experience across cybersecurity, network engineering, infrastructure, or a similar technical discipline.
• Strong networking fundamentals, including TCP/IP, DNS, DHCP, VLANs, routing, switching, VPNs, and firewall administration.
• Experience supporting and troubleshooting enterprise network environments.
• Familiarity with routing technologies such as BGP and OSPF.
• Experience working with Windows Server, Active Directory, Microsoft 365, Azure, Entra ID, and related Microsoft technologies.
• Understanding of vulnerability management, endpoint security, incident response, and common cybersecurity threats.
• Familiarity with recognized security and compliance frameworks such as NIST, CMMC, and CIS.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to independently own technical issues while collaborating across multiple teams.

Preferred Experience

• Experience with enterprise firewall and networking platforms such as SonicWall, Cisco, Meraki, or similar technologies.
• Exposure to security tools such as Microsoft Defender, Sentinel, Intune, CrowdStrike, or comparable platforms.
• Knowledge of hybrid/cloud networking and identity technologies including MFA, SSO, and Conditional Access.
• Experience supporting security within manufacturing, industrial, or operational technology environments is beneficial.
• Hands-on experience with vulnerability scanners, SIEM solutions, security assessments, or compliance audits.
• PowerShell, Python, scripting, or security automation experience.
• Certifications such as Security+, Network+, CCNA, CCNP, CISA, or Microsoft security/cloud certifications are a plus.

Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers