IT Security Engineer - Team Lead in Mundelein

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or equivalent experience \n

• 5+ years of hands-on cybersecurity experience, with deep focus on security technologies \n

• Direct administration experience with EDR or XDR platforms such as CrowdStrike, email security platforms such as Abnormal, vulnerability management systems such as Qualys or Rapid7, and managing MSSP partners. \n

• Proven experience managing incident investigations from detection through remediation \n

• Familiarity with Active Directory, Microsoft Entra ID, Microsoft 365, and Windows and Linux environments \n

• Experience leading projects or informally leading other analysts \n

• Strong written and verbal communication, with the ability to brief management on technical risk \n

• Familiarity with NIST CSF, CIS Controls, and MITRE ATT&CK \n

• experience in a regulated financial services environment supporting FFIEC, GLBA, SOX, or PCI DSS requirements or other highly regulated environment \n

• Scripting and automation skills in PowerShell or Python is valuable

• Administer, tune, and maintain EDR, email security, SIEM, vulnerability scanning, and related security tools \n

• Monitor and triage alerts, perform investigations, and contain and remediate security incidents \n

• Active participant during incident response activities, document findings, and drive root cause and lessons learned reviews \n

• Run the vulnerability management lifecycle, including scanning, risk-based prioritization, remediation tracking, and exception management \n

• Manage phishing defense, including email filtering, DMARC, DKIM, SPF, user reported phish triage, and simulation campaigns \n

• Work with the MSSP to conduct threat hunting and build detection rules aligned to MITRE ATT&CK \n

• Support and access security, including MFA, privileged access, and periodic access reviews \n

• Define and enforce Service Level Agreements (SLAs) for vulnerability remediation based on severity and risk. \n

\n

\n

Security Initiatives

\n \n

• Work with the CISO to plan and execute security projects from scoping through delivery, including tool deployments, upgrades, and control improvements \n

• Manage project timelines, dependencies, and coordination with infrastructure, application, and business teams \n

• Partner with the CISO and VP - Information Technology to evaluate new security technologies and recommend improvements to the security stack \n

• Participate in incident response planning, tabletop exercises, and root cause analysis. \n

• Translate complex security vulnerabilities into tangible business risks and opportunities for improvement for non-technical stakeholders. \n

\n

Team Leadership

\n \n

• Guide and mentor a team of two to three security analysts \n

• Assign and prioritize daily work, review investigations, and serve as the escalation point \n

• Develop and maintain runbooks, procedures, and operational standards \n

• Support analyst growth through coaching, training, and certification goals \n

\n

\n

Reporting and Communication

\n \n

• Report security metrics, incident summaries, and project status to VP - Information Technology and CISO \n

• Translate technical findings into clear business risk for leadership \n

• Support the CISO during internal audits, regulatory examinations, and third-party assessments with evidence and control walkthroughs \n

• Partner with IT teams to remediate findings and embed security into operations \n

\n

\n