Senior Vulnerability & Security Automation Lead

Insight Global; Chicago (IL); On-site; USD 130,000 - 155,000; Full time

Job summary

Cboe Global Markets is looking for a Sr Vulnerability Analyst to join the Global Vulnerability Management team in Chicago. You will lead risk-based vulnerability programs, mentor staff, and partner with infrastructure and application teams to mitigate threats.

The role emphasizes automation, cloud/SaaS security tooling, and strong communication across technical and executive stakeholders. A four‑day in‑office work model is in place.

Qualifications

• Senior-level information security experience with 5+ years in security or 3+ years in security plus 2–3 years in core IT roles.
• Hands-on with vulnerability management and cloud/SaaS security tooling (Qualys, Tenable, Rapid7; CSPM tooling).
• Strong scripting/automation in Python for security ops, tooling integration and data analysis.
• Advanced AI usage skills to boost productivity with tools like Copilot/ChatGPT and code/workflow tooling.

Responsibilities

• Reduce risk to global IT infrastructure via RBVM program.
• Mentor and coach junior staff; document standards and procedures.
• Analyze vulnerability scans and coordinate remediation with global teams.
• Drive automation to improve detection, remediation tracking and reporting.
• Escalate and provide guidance on risk prioritization and remediation.

Skills

Vulnerability management

Python scripting

Cloud/SaaS security tooling

AI tooling usage

Linux/Windows administration

Active Directory/Entra ID

Security engineering

Jira/Confluence

Data visualization (Power BI)

Mentoring junior staff

Education

Bachelor's oradvanced degree in Cybersecurity/CS/Engineering

Tools

Qualys

Tenable

Rapid7

Wiz/Prisma (CSPM)

Repo/Obsidian/Valence/AppOmni/Aqua (SSPM)

Jira

Confluence

Power BI

Sigma/Snowflake

Job description

Cboe Global Markets is looking for a Sr Vulnerability Analyst to join the Global Vulnerability Management team in Chicago. You will lead risk-based vulnerability programs, mentor staff, and partner with infrastructure and application teams to mitigate threats.

The role emphasizes automation, cloud/SaaS security tooling, and strong communication across technical and executive stakeholders. A four‑day in‑office work model is in place.