Senior Identity & Endpoint Security Engineer (Hybrid)

Cybersecurity Jobs; Round Lake (IL); Hybrid; USD 130,000 - 195,000; Full time

Benefits offered by this job

Competitive base salary

Annual performance bonus

Long-term incentives

Job summary

Relativity in Illinois is seeking a Senior Security Engineer to advance a defense-in-depth program focused on identity and endpoint security engineering. This hybrid role spans EDR/XDR, identity controls, telemetry, detection, and automation to support investigation and response at scale.

You will own endpoint hardening baselines, integrate telemetry into central analytics/SIEM, lead root-cause analysis, design identity security patterns, and build automated detections and SOAR workflows with

Qualifications

• 4-8 years of hands-on enterprise security engineering experience with a focus on endpoints and identity.
• Hands-on experience with EDR, XDR, SIEM, CNAPP, CSPM, CWP, and strong OSI model knowledge.
• Threat hunting, forensics, and automation scripts with enforcement and observability.
• Familiarity with MITRE ATT&CK and NIST frameworks; certification such as SSCP or Security+.
• Experience mentoring junior engineers and driving cross-functional security initiatives.

Responsibilities

• Deploy, optimize, and manage EDR/XDR platforms with custom detections and automated responses.
• Own endpoint and image hardening baselines, configuration standards, and application control baselines.
• Integrate endpoint telemetry into central analytics/SIEM for security context and correlation.
• Act as escalation point for endpoint events, vulnerabilities, and alerts; drive remediation with SLAs.
• Lead root-cause analysis for identity-based attacks and coordinate remediation.
• Automate identity provisioning, certification, policy enforcement, and response via APIs and scripts.
• Design and enforce least-privilege access patterns using RBAC/ABAC and lifecycle controls.
• Lead purple-team exercises; map hunts to MITRE ATT&CK and ATLAS techniques.
• Develop durable automated detections and containment logic; build SOAR workflows.
• Mentor engineers and contribute to runbooks and security documents.

Skills

Endpoint Security

Threat Hunting

SIEM

Automation Scripts

Python

PowerShell

Bash

Identity Security

SSCP

MITRE ATT&CK

Tools

EDR

XDR

SIEM

CNAPP

CSPM

CWP

AWS

Azure

GCP

Job description

Relativity in Illinois is seeking a Senior Security Engineer to advance a defense-in-depth program focused on identity and endpoint security engineering. This hybrid role spans EDR/XDR, identity controls, telemetry, detection, and automation to support investigation and response at scale.

You will own endpoint hardening baselines, integrate telemetry into central analytics/SIEM, lead root-cause analysis, design identity security patterns, and build automated detections and SOAR workflows with