Senior Security Engineer

Request Technology, LLC; Chicago (IL); On-site; USD 120,000 - 165,000; Full time

Job summary

Request Technology, LLC is seeking a senior security engineer to lead PKI, encryption key management, and security operations across on‑premises and cloud environments. You will design and enforce zero-trust, IAM, and cloud security controls with a focus on automation and risk reduction.

The role involves mentoring teammates, developing security standards, and evaluating new technologies to improve detection, response, and overall security posture in a fast‑paced IT landscape.

Qualifications

• 5–8+ years IT experience, including 3–5+ years in cybersecurity engineering.
• PKI & cryptography: certificate lifecycle management, PKI, AD CS, HSMs.
• Security operations: EDR, SIEM, threat detection, threat hunting, incident response.
• Security platforms: CrowdStrike, Microsoft Sentinel, Netskope, Cisco Umbrella, DigiCert.
• IAM, cloud security in Azure/Entra, Zero Trust.
• Automation & scripting: PowerShell, Python, and KQL.

Responsibilities

• Manage the full lifecycle of digital certificates and PKI environments, including discovery, issuance, renewal, and revocation.
• Administer encryption key management platforms and HSMs, ensuring secure generation, rotation, storage, and destruction of keys.
• Design, implement, maintain, and improve network, endpoint, cloud, and identity security controls.
• Optimize EDR, SIEM, DLP, CASB to improve visibility, detection accuracy, and response.
• Identify security gaps and lead remediation initiatives to strengthen the security posture.
• Lead security initiatives and partner with IT, architecture, product and project teams.
• Advance secure endpoint and identity practices with infrastructure teams.
• Develop and maintain security standards and baselines aligned with NIST/CIS.
• Automate workflows, telemetry optimization, and process improvements in security operations.
• Support mentorship, documentation, and reusable security solutions for the team.
• Act as escalation point for complex issues and contribute to incident readiness and runbooks.
• Research emerging security technologies and recommend solutions to reduce organizational risk.

Skills

Cybersecurity engineering

Threat detection

Incident response

Identity & access management

Zero Trust security

PKI & cryptography

Automation & scripting

Cloud security

PowerShell

Python

KQL

Tools

CrowdStrike

Microsoft Sentinel

Google SecOps

Netskope

Cisco Umbrella

BeyondTrust

Cribl

DigiCert

CyberArk Certificate Management (Venafi)

Microsoft Entra

Job description

*We are unable to provide sponsorship for this role*

Qualifications

• 5-8+ years of Information Technology (IT) experience, including 3-5+ years in cybersecurity engineering or a closely related security-focused role.
• PKI & Cryptography Expertise: Advanced experience with digital certificate lifecycle management, Public Key Infrastructure (PKI), Microsoft Active Directory Certificate Services (AD CS), encryption key management platforms, and Hardware Security Modules (HSMs).
• Security Operations Expertise: Strong knowledge of Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), threat detection, threat hunting, and incident response processes.
• Security Platform Experience: Hands-on experience with technologies such as CrowdStrike, Microsoft Sentinel, Google SecOps, Netskope, Cisco Umbrella, BeyondTrust, Cribl, DigiCert, CyberArk Certificate Management (formerly Venafi), and Microsoft Entra.
• Identity & Access Management: Deep understanding of authentication, federation, conditional access, privileged access management, and modern identity platforms.
• Cloud & Enterprise Security: Experience implementing and supporting cloud security controls, particularly within Microsoft Azure and Microsoft Entra environments, with knowledge of Zero Trust principles and secure architecture practices.
• Automation & Scripting: Ability to improve security operations through automation using tools and languages such as PowerShell, Python, and Kusto Query Language (KQL).

Responsibilities

• Certificate & PKI Management: Manage the full lifecycle of digital certificates, including discovery, issuance, renewal, monitoring, revocation, and automation, while administering Public Key Infrastructure (PKI) and Microsoft Active Directory Certificate Services (AD CS) environments.
• Encryption & Key Security: Administer enterprise encryption key management platforms and Hardware Security Modules (HSMs), ensuring secure generation, storage, rotation, archival, and destruction of cryptographic keys.
• Security Engineering: Design, implement, maintain, and continuously improve network, endpoint, cloud, and identity security controls through monitoring, tuning, and automation.
• Threat Detection & Response: Optimize Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), and related security platforms to improve visibility, detection accuracy, and response effectiveness.
• Risk Reduction: Identify security gaps, control weaknesses, and misconfigurations, then lead remediation initiatives and implement long-term solutions that strengthen the security posture.
• Technical Leadership: Serve as a lead contributor on security initiatives, partnering with Information Technology (IT), architecture, product, and project teams to support secure onboarding and integration of applications and platforms.
• Identity & Access Security: Advance secure endpoint and identity practices by collaborating with infrastructure and business teams to improve protection of critical systems and data.
• Standards & Governance: Develop and maintain security standards, engineering patterns, and baselines aligned with industry frameworks such as the National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS).
• Automation & Operational Excellence: Enhance security operations through scripting, workflow automation, telemetry optimization, and continuous process improvement.
• Mentorship & Knowledge Sharing: Support team growth through mentoring, documentation, reusable solutions, and technical guidance for less experienced engineers.
• Incident & Escalation Support: Act as an escalation point for complex security issues, contributing to incident response readiness, runbooks, and on-call support processes
• Innovation & Technology Evaluation: Research emerging security technologies and recommend solutions that improve operational efficiency and reduce organizational risk.