Security Engineer

Iceberg; Chicago (IL); On-site; USD 120,000 - 170,000; Full time

Job summary

Iceberg is seeking a Security Engineer to join a global security team renowned for engineering excellence. You will work across cloud security, identity security, incident response, and security operations, shaping scalable security solutions and automating processes.

The role targets engineers who enjoy solving complex problems, building robust defenses, and collaborating with strong technical peers to reduce risk and protect critical business operations.

Qualifications

• Experience in security engineering across cloud and on-prem infrastructure.
• Strong understanding of IAM, access controls and DevSecOps practices.
• Hands-on with security operations, incident response and threat detection.

Responsibilities

• Design and implement scalable security controls across cloud and enterprise environments.
• Automate security processes to reduce manual toil and improve detection capabilities.
• Lead investigations into incidents, perform root-cause analysis and recommend mitigations.
• Collaborate with engineering teams to embed security into product and platform initiatives.

Skills

Security engineering

Cloud security

IAM/DevSecOps

Incident response

Threat detection

SIEM/EDR

Python/PowerShell

Security tooling automation

Tools

AWS

Microsoft Defender

GuardDuty

Job description

I'm working with a leading quantitative trading and proprietary trading firm to hire a Security Engineer into a highly respected global security team.

This is not the kind of environment where security operates on the sidelines. The firm's success is built on technology, engineering excellence and the ability to solve complex problems at speed. Security is viewed as a core engineering function and is expected to operate to the same exceptionally high standards as the rest of the business.

The team is looking for an engineer who enjoys understanding how things work, finding weaknesses before others do, and building solutions that scale. The environment attracts people who are naturally curious, highly analytical, and genuinely passionate about technology. Many of the strongest individuals in the organisation are the type of people who enjoy solving puzzles, automating repetitive tasks, and diving deep into technical problems simply because they find them interesting.

The role offers broad exposure across cloud security, identity security, incident response, security operations, automation, and infrastructure security. You'll be working across a global environment spanning AWS, Microsoft 365, enterprise infrastructure, endpoints, and security tooling, helping protect systems that support critical business operations.

What makes this opportunity particularly interesting is the emphasis on engineering. The team is not looking for someone who simply monitors alerts and follows runbooks. They want someone who can identify inefficiencies, build solutions, automate processes, and continuously improve how security is delivered across the organisation.

The bar is high. The people who tend to succeed in this environment are intellectually curious, highly driven and comfortable operating alongside exceptionally strong engineers. You'll be challenged technically, but you'll also be given the freedom and support to have a meaningful impact.

Key areas of experience include:

• Security engineering, security operations, cloud security, IAM, or DevSecOps
• AWS security, including IAM, GuardDuty, CloudTrail, Security Hub, AWS Config, and KMS
• Microsoft security technologies, including Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, and Secure Score
• Incident response, threat detection, security investigations, and risk reduction
• SIEM, EDR, vulnerability management, SOAR, CASB, or similar security technologies
• Identity and access management, including RBAC, PAM, SSO, SAML, OAuth, and OIDC
• Windows and Linux security
• Enterprise networking fundamentals, including TCP/IP, DNS, VPNs, firewalls, and proxies
• Python and/or PowerShell scripting and automation
• API integrations and security tooling development
• Data protection technologies, including DLP, classification, information protection, and Microsoft Purview

The ideal candidate will approach security challenges with an engineering mindset, favour practical solutions over unnecessary complexity, and actively look for opportunities to automate and improve existing processes.

This is an opportunity to join a world-class technology environment where security is treated as a genuine engineering discipline, surrounded by people who care deeply about solving difficult problems and building exceptional systems.