Senior Cybersecurity Engineer: Threat & Compliance Lead

Brown and Caldwell; Chicago (IL); On-site; USD 129,000 - 212,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Paid time off

Employee assistance program

Job summary

Brown and Caldwell Senior Cyber Security Engineer protects the company's systems by designing, building, and supporting advanced security solutions while aligning the compliance posture with SOC2, CMMC, and client requirements.

You will collaborate with technical and business teams to manage incidents, perform vulnerability assessments, and enforce zero-trust, least-privilege, and secure software development practices across cloud and on‑prem environments.

Qualifications

• Minimum 8 years of cyber security experience.
• Experience with incident and vulnerability management and security guidance.
• Knowledge of SOC2, CMMC compliance preferred.

Responsibilities

• Monitor and respond to security alerts and tickets with professional acuity and precision.
• Work with BC employees to provide support on complex issues, address security questions, and address concerns/threats.
• Develop, implement, and enforce security standards and guidelines for the company.
• Participate in the incident management process, working closely with other team members to respond and resolve security events and incidents.
• Perform regular vulnerability and security assessments and recommend security solutions to mitigate potential risks.
• Provide necessary security requirements and guidance for the company during new technology evaluations and implementations.
• Coordinate and manage legal discovery and holds, as well as contract reviews and client security questionnaires.
• Identify opportunities to improve processes and tasks via automation or efficiency.
• Perform complex scripting and script debugging for automating security tasks.
• Anticipate security challenges and implement preventative measures.
• Ensure compliance with all relevant regulations and standards.
• Make critical decisions balancing risks and opportunities to impact positively the company's overall security.
• Flexibility to adapt and execute various additional assignments based on evolving need

Skills

Information security

Analysis & problem-solving

Communication skills

Application security

Software security

Authentication security

SIEM

Automation

Incident management

Vulnerability management

Compliance

Security tooling

Education

Degree in computer science/cybersecurity or related field

Certifications (CISSP, Security+ etc.)

Tools

Scripting

Job description

Brown and Caldwell Senior Cyber Security Engineer protects the company's systems by designing, building, and supporting advanced security solutions while aligning the compliance posture with SOC2, CMMC, and client requirements.

You will collaborate with technical and business teams to manage incidents, perform vulnerability assessments, and enforce zero-trust, least-privilege, and secure software development practices across cloud and on‑prem environments.