IT Security Engineer II

Title : IT Security Engineer II

Location : Chicago, IL

Contract to Hire Role - 6 months Contract and then convert into Fulltime

2 Days in a month visit to Office .

Must be Green Card or Citizen

An IT Security Engineer II. This is an exciting opportunity to join a leading healthcare organization where you'll play a critical role in protecting enterprise systems, cloud environments, applications, and sensitive data from evolving cyber threats.

As IT Security Engineer II , you'll help strengthen the organization's cybersecurity posture by designing and implementing enterprise security solutions, leading incident response activities, managing advanced security technologies, and driving security strategy across the organization.

This role offers the opportunity to work with modern cloud and security platforms while partnering with infrastructure, application, and business teams to continuously improve security operations.

What You'll Bring:

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline (or equivalent combination of education and experience).
• Minimum 3+ years of cybersecurity experience as a Security Analyst or Security Engineer.
• Experience administering and supporting enterprise security applications such as Vulnerability Management, Privileged Access Management (PAM), SIEM, Endpoint Security, DLP, and Email Security platforms.
• Experience leading cybersecurity projects and cross-functional initiatives.
• Ability to independently manage multiple priorities with minimal supervision.
• Strong knowledge of cybersecurity principles, frameworks, and best practices.
• Experience designing and implementing enterprise security solutions.
• Advanced incident investigation and threat analysis skills.
• Working knowledge of network, application, cloud, and infrastructure security.
• Excellent communication and stakeholder management skills.
• Strong project management and organizational abilities.
• A collaborative mindset with the ability to mentor others and influence security best practices.

Core Security Technology & Domain Experience

• Cloud Security: Microsoft Azure, CSPM, CNAPP
• Security Operations: SIEM, SOAR, Threat Detection & Exposure Management, Security Incident Response
• Endpoint Security: EDR/XDR, Data Loss Prevention (DLP)
• Identity & Access Security: Identity & Access Management (IAM), Privileged Access Management (PAM)
• Infrastructure Security: Network, Server, Desktop, Database, Cloud & Application Security
• Vulnerability & Risk Management: Vulnerability Management, Risk Assessments, Security Governance
• Enterprise Security: Security Architecture, Enterprise Security Controls, Asset Inventory & Configuration Management
• System Security: System Hardening, IDS/IPS

Preferred Qualifications

• Advanced, professional, or expert-level cybersecurity certification (CISSP, GIAC, CCSP, or similar).
• Healthcare industry experience or experience working within highly regulated environments.
• Experience administering and supporting one or more of the following enterprise security technologies is highly desired. Comparable technologies will also be considered.

o Data Loss Prevention: CrowdStrike Falcon, CrowdStrike DLP, or comparable EDR/DLP platforms

o Vulnerability Management: Tenable Security Center, Qualys

o Privileged Access Management (PAM): Delinea (or comparable PAM solutions such as CyberArk or BeyondTrust)

o Email Security: Proofpoint Email Protection (or comparable secure email gateway solutions)

o SIEM: Sumo Logic SIEM (or comparable SIEM solutions)

What You'll Do

• Lead complex cybersecurity incident investigations, response, and recovery efforts.
• Identify security threats and vulnerabilities and implement effective remediation strategies.
• Architect, design, implement, and enhance enterprise security technologies and processes.
• Administer, monitor, troubleshoot, and optimize multiple enterprise security platforms.
• Serve as the primary administrator and technical owner of the CrowdStrike DLP platform, including ongoing administration, policy management, optimization, troubleshooting, and enhancements to strengthen enterprise data protection.
• Drive automation of security operations to improve efficiency and reduce organizational risk.
• Develop and maintain enterprise security policies, standards, procedures, and operational documentation.
• Create both short- and long-term security technology roadmaps and business cases.
• Conduct security reviews, risk assessments, and impact analyses for new and existing systems.
• Develop, audit, and enhance enterprise security controls across on-premises and cloud environments.
• Measure and report on enterprise security capabilities using automated and manual tools.
• Collaborate with IT and business leaders to promote security awareness and best practices.
• Support internal and external audits, compliance initiatives, and regulatory assessments.
• Assist with HIPAA, PCI, NIST, and other security and compliance requirements.
• Cross-train team members and mentor peers on operational processes and security technologies.
• On-call participation in a rotating 24/7 schedule supporting enterprise security operations.