Security Engineering Lead: Cloud & Incident Response

Morningstar; Chicago (IL); On-site; USD 152,000 - 233,000; Full time

Benefits offered by this job

401k match

Stock ownership

Health benefits

Sabbatical program

Family caregiving leave

Parental leave

Tuition reimbursement

Volunteer days

Employee resource groups

Job summary

Morningstar in Chicago, IL is seeking a Senior Manager to lead Security Engineering, owning the tooling behind our security program and guiding engineers across detection, email security, SOAR, and cloud security posture management.

The role reports to the Director of Security Operations & Engineering, with an on-site work arrangement and occasional after-hours escalation rotation. Drive collaboration with product teams and security leadership to advance our security foundations.

Qualifications

• 4+ years of people management experience or equivalent technical leadership.
• Hands-on security engineering knowledge; able to troubleshoot complex problems.
• Cloud security experience in a large, multi-cloud environment; AWS experience preferred.
• Strong technical judgment and ability to communicate with engineers, analysts, and senior leaders.
• CISSP, CISM, or GIAC certifications welcome but not required.

Responsibilities

• Lead and develop security engineers and the incident response lead.
• Own the engineering roadmap for detection and security platforms; balance operational needs with architecture and debt.
• Collaborate with the 24x7 SOC to improve detections, automate where possible, and measure detection quality and response performance.
• Support incident investigations, containment, and lessons learned to drive engineering improvements.
• Partner with product, cloud, and infra teams to strengthen security across AWS, GCP, and Azure.
• Integrate automated security checks into CI/CD pipelines ( Harness ) across development teams.

Skills

People management

Security engineering

Incident response

Cloud security

SIEM

EDR

CI/CD security

Security automation

AWS

Communication

Leadership

Tools

Splunk

CrowdStrike

Wiz

Wiz Defend

Zscaler

XSOAR

Tines

Harness

Job description

Morningstar in Chicago, IL is seeking a Senior Manager to lead Security Engineering, owning the tooling behind our security program and guiding engineers across detection, email security, SOAR, and cloud security posture management.

The role reports to the Director of Security Operations & Engineering, with an on-site work arrangement and occasional after-hours escalation rotation. Drive collaboration with product teams and security leadership to advance our security foundations.