Senior Cybersecurity Engineer

ConsultNet Technology Services and Solutions; Chicago (IL); On-site; USD 130,000 - 160,000; Full time

Job summary

ConsultNet Technology Services and Solutions in Chicago is seeking a Senior Cybersecurity Engineer to lead incident response, cyber recovery, forensics, and security hardening across on‑prem and cloud environments.

You will design secure recovery environments, perform root cause analyses, and mentor junior engineers while coordinating with cross-functional teams on technology roadmaps and security controls. Hands-on, analytical, and capable of managing active incidents are essential.

Qualifications

• Strong hands-on experience with cybersecurity incident response and incident handling.
• Experience leading complex or large-scale cybersecurity incidents.
• Experience with clean room, isolated recovery, or secure cyber recovery environments.
• Experience supporting ransomware recovery and cyber resilience programs.
• Hands-on forensic investigation experience involving endpoints, networks, cloud environments, or security logs.
• Strong experience with SIEM platforms and log analysis.
• Experience conducting root cause analysis and communicating findings to technical and executive audiences.
• Strong understanding of system, network, application, and infrastructure security hardening.
• Experience working with a combination of on-premises and cloud environments.
• Understanding of MITRE Telecommunication and Cyber Kill Chain frameworks.
• Familiarity with CI/CD environments and modern application delivery practices.
• Ability to document and automate repetitive security tasks, workflows, and incident response playbooks.
• Strong analytical and problem-solving skills.
• Ability to work independently and manage multiple priorities during active security incidents.

Responsibilities

• Lead cybersecurity incident response, investigation, containment, eradication, and recovery efforts.
• Design and maintain clean room and isolated recovery environments for secure system restoration following cyber incidents.
• Perform root cause analysis and recommend corrective actions following security incidents.
• Conduct forensic analysis across endpoints, networks, cloud environments, and security logs.
• Identify security vulnerabilities and recommend improvements to strengthen systems, applications, and infrastructure.
• Support cybersecurity hardening and cyber resilience initiatives.
• Analyze SIEM data, security alerts, trends, patterns, and anomalies.
• Develop and improve incident response procedures, playbooks, and automated security processes.
• Apply security frameworks such as MITRE Telecommunication CK and Cyber Kill Chain to threat detection and incident response.
• Assess, implement, configure, and support cybersecurity technologies and security controls.
• Support security technologies including IAM, DLP, vulnerability management, threat management, intrusion detection, and incident response platforms.
• Work with internal teams to incorporate cybersecurity requirements into technology projects and environments.
• Develop technology roadmaps and recommendations for supported cybersecurity tools.
• Serve as a cybersecurity subject matter expert for technical projects and initiatives.
• Mentor and provide technical guidance to less experienced cybersecurity team members.
• Work with cybersecurity vendors and technology partners as needed.
• Participate in an on-call rotation and support major cybersecurity incidents when required.

Skills

Incident response

Forensic analysis

Cloud security

SIEM analysis

Security hardening

Incident leadership

Tools

SIEM platforms

Job description

Title: Senior Cybersecurity Engineer
Location : Chicago, IL
Target Start Date : ASAP Backfill
Type: Direct Hire
Pay Rate / Salary : $130,000-160,000

Title: Senior Cybersecurity Engineer
Location : Chicago, IL
Target Start Date : ASAP Backfill
Type: Direct Hire
Pay Rate / Salary : $130,000-160,000

Senior Cybersecurity Engineer Position Summary

We are seeking an experienced Senior Cybersecurity Engineer to lead advanced cybersecurity initiatives focused on incident response, cyber recovery, forensic investigation, and security hardening.

This role will help design and maintain secure recovery environments, investigate and respond to cybersecurity incidents, identify root causes, and strengthen systems against future threats. The ideal candidate is highly technical, hands-on, analytical, and comfortable leading complex security incidents while working across both on-premises and cloud environments.

Key Responsibilities

• Lead cybersecurity incident response, investigation, containment, eradication, and recovery efforts.
• Design and maintain clean room and isolated recovery environments for secure system restoration following cyber incidents.
• Perform root cause analysis and recommend corrective actions following security incidents.
• Conduct forensic analysis across endpoints, networks, cloud environments, and security logs.
• Identify security vulnerabilities and recommend improvements to strengthen systems, applications, and infrastructure.
• Support cybersecurity hardening and cyber resilience initiatives.
• Analyze SIEM data, security alerts, trends, patterns, and anomalies.
• Develop and improve incident response procedures, playbooks, and automated security processes.
• Apply security frameworks such as MITRE Telecommunication&CK and Cyber Kill Chain to threat detection and incident response.
• Assess, implement, configure, and support cybersecurity technologies and security controls.
• Support security technologies including IAM, DLP, vulnerability management, threat management, intrusion detection, and incident response platforms.
• Work with internal teams to incorporate cybersecurity requirements into technology projects and environments.
• Develop technology roadmaps and recommendations for supported cybersecurity tools.
• Serve as a cybersecurity subject matter expert for technical projects and initiatives.
• Mentor and provide technical guidance to less experienced cybersecurity team members.
• Work with cybersecurity vendors and technology partners as needed.
• Participate in an on-call rotation and support major cybersecurity incidents when required.

Required Skills & Experience

• Strong hands-on experience with cybersecurity incident response and incident handling.
• Experience leading complex or large-scale cybersecurity incidents.
• Experience with clean room, isolated recovery, or secure cyber recovery environments.
• Experience supporting ransomware recovery and cyber resilience programs.
• Hands-on forensic investigation experience involving endpoints, networks, cloud environments, or security logs.
• Strong experience with SIEM platforms and log analysis.
• Experience conducting root cause analysis and communicating findings to technical and executive audiences.
• Strong understanding of system, network, application, and infrastructure security hardening.
• Experience working with a combination of on-premises and cloud environments.
• Understanding of MITRE Telecommunication&CK and Cyber Kill Chain frameworks.
• Familiarity with CI/CD environments and modern application delivery practices.
• Ability to document and automate repetitive security tasks, workflows, and incident response playbooks.
• Strong analytical and problem-solving skills.
• Ability to work independently and manage multiple priorities during active security incidents.

Technical depth in at least two of the following

• Threat detection and detection engineering
• Threat hunting
• Cloud security
• OT security
• Security automation or programming
• Penetration testing

Nice to Have

• Experience with OT/ICS security environments.
• Experience with OT security monitoring technologies such as:
  • Cisco Cyber Vision
  • Nozomi Networks
  • Claroty
  • Dragos
• Experience with Identity and Access Management (IAM) technologies.
• Experience with Data Loss Prevention (DLP) and data classification tools.
• Experience with vulnerability and threat management platforms.
• Experience developing security technology roadmaps.
• Experience managing or working directly with cybersecurity technology vendors.
• Experience mentoring junior cybersecurity engineers or analysts.
• Experience presenting cybersecurity incidents, risks, and remediation strategies to senior leadership.

Additional Expectations

• Strong written and verbal communication skills.
• Ability to collaborate across technical and business teams.
• Self-motivated and able to operate with limited supervision.
• Willingness to participate in after-hours or on-call incident response when necessary.
• Travel may occasionally be required.

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.