Senior Threat Hunting Engineer - Detection & Emulation

Cedar Cares, Inc; Chicago (IL); On-site; USD 131,000 - 169,000; Full time

Benefits offered by this job

Salary & incentives

Paid time off

Health benefits

401(k) match

Job summary

Cboe Global Markets is seeking a Senior Engineer Threat Hunting in Chicago to lead enterprise detection engineering, threat hunting, and adversary emulation efforts. You will design detections across SIEM, EDR, cloud, and SaaS, partnering with stakeholders to validate detection strategies and improve telemetry.

The role requires 5–8+ years in cybersecurity operations with strong automation skills and the ability to work with minimal direction in a fast-paced environment.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• Strong hands‑on experience with SIEM, EDR, cloud security platforms.
• Proficiency in scripting and automation for security operations.

Responsibilities

• Own the enterprise detection engineering capability end‑to‑end.
• Design, implement, and review high‑fidelity detections across endpoint, identity, cloud, network, and SaaS environments.
• Lead complex, hypothesis‑driven threat hunts that address cross‑organizational risk and novel attacker behavior.
• Translate threat hunting outcomes into robust detections, improved telemetry, or architectural changes.
• Partner with internal stakeholders to design and execute adversary emulation scenarios.
• Identify systemic detection and response gaps and drive remediation across teams.
• Act as technical lead during highest‑severity incidents, guiding investigative approach.
• Stay current with industry trends, security standards and best practices.

Skills

Cybersecurity operations

Threat hunting

Detection engineering

SIEM

EDR

Cloud security

Scripting

Education

Bachelor’s degree or equivalent practical experience

Tools

Google SecOps SIEM

Defender XDR

CrowdStrike

Microsoft Security Stack

ProofPoint Email Security Services

Job description

Cboe Global Markets is seeking a Senior Engineer Threat Hunting in Chicago to lead enterprise detection engineering, threat hunting, and adversary emulation efforts. You will design detections across SIEM, EDR, cloud, and SaaS, partnering with stakeholders to validate detection strategies and improve telemetry.

The role requires 5–8+ years in cybersecurity operations with strong automation skills and the ability to work with minimal direction in a fast-paced environment.