Cyber Security Engineer

4 weeks ago

Chicago, Illinois, United States CME Group Full time

We are seeking a highly skilled Cyber Security Engineer - Red Team to join our Offensive Security organization and contribute towards improving CME Group's security posture.

This role will be responsible for participating in the execution of Red Team cyber exercises of internal and internet facing information systems and infrastructure to identify misconfigurations and cyber security vulnerabilities that could be exploited by a threat actor to gain unauthorized access to computer systems and data.

The ideal candidate will have approximately 8 years' experience with industry standard Red Team testing tools and an expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.

Key responsibilities will include leading red team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework, participating in purple team exercises that are intelligence driven to test cyber detections, and building and maintaining Red and Purple team infrastructure, automating functions where possible.

The successful candidate will also have a strong understanding of at least one scripting language and experience with at least one cloud environment.

Additionally, the role will require the ability to lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team's deliverables, and assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.

Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.

Active contributor to Red and Purple Team activities for internal presentations and conferences.

Principal Responsibilities:

  • Lead red team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework.
  • Participate in purple team exercises that are intelligence driven to test cyber detections.
  • Build and maintain Red and Purple team infrastructure, automating functions where possible.
  • Continually research new offensive security tactics, techniques, and procedures and communicate knowledge of the same to other team members.
  • Conduct ad-hoc offensive security testing using industry standard tools and/or internally developed tools.
  • Lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team's deliverables.
  • Assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.
  • Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.
  • Active contributor to Red and Purple Team activities for internal presentations and conferences.

Position Requirements:

  • Approximately 8 years' experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.) or the ability to demonstrate equivalent knowledge.
  • Expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.
  • Expert understanding of Red Team concepts, tools, and automation strategies.
  • Expert understanding of MITRE ATT&CK framework tactics, techniques, and procedures.
  • Expert understanding of measuring and rating vulnerabilities based on principal characteristics of a vulnerability.
  • Expert understanding of Windows and Linux system hardening concepts and techniques.
  • Expert understanding of modifying payloads to bypass detections like EDR.
  • Expert understanding of how to compromise a company without using phishing.
  • Strong understanding with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
  • Experience with at least one cloud environment (AWS, GCP, Azure).
  • Experience attacking cloud, on-prem and/or hybrid environments from initial access all the way through actions on objective.

Nice to have:

  • Previous experience of Red Team project delivery to include creation and execution of statement of work, risk mitigation strategies, and working with stakeholders to remediate findings.
  • Experience of using multi operating system command and control tools.
  • Experience developing custom attack tradecraft or modifying existing tools.
  • Experience using automated configuration management such as Chef.
  • Experience discovering and exploiting vulnerabilities in AI systems.
  • Experience of conducting Offensive Security and/or Red Team exercises against macOS, iOS, or ChromeOS.
  • Recognized industry certifications such as, but not limited to, GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
  • Knowledgeable in Industry Security standards (i.e.: TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.).
  • Knowledgeable in Agile project management.

CME Group:

Where Futures are Made

We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small.

Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more.

  • Staff Cyber Security Engineer

    4 weeks ago

    Chicago, Illinois, United States Lenovo Full time

    Job Title: Staff Cyber Security EngineerJob Summary:We are seeking a highly skilled Staff Cyber Security Engineer to join our team at Lenovo. As a Staff Cyber Security Engineer, you will be responsible for designing, implementing, and deploying technical controls to protect Lenovo's systems and data. You will also conduct project technical security...

  • Cyber Security Analyst

    4 weeks ago

    Chicago, Illinois, United States RKON Full time

    Job Title: Cyber Security AnalystRKON is seeking a highly motivated and detail-oriented Cyber Security Analyst to join our award-winning team. As a Cyber Security Analyst, you will play a critical role in identifying, analyzing, and remediating potential threats to our environment.About the Position: As a Cyber Security Analyst, you will be responsible for...

  • Cloud Security Architect

    3 days ago

    Chicago, Illinois, United States Cyber Crime Full time

    Cloud Security ArchitectWe're seeking a highly skilled Cloud Security Architect to join our team at Cyber Crime. As a key member of our Cybersecurity team, you will be responsible for ensuring the security and compliance of our cloud platform and products.Key ResponsibilitiesDevelop and implement technical solutions to ensure compliance with industry...

  • Cyber Security Analyst

    4 weeks ago

    Chicago, Illinois, United States Newly Weds Foods- Corporate Full time

    Job Summary:The Cyber Security Analyst will assess, plan, and implement proactive security measures to protect the confidentiality, integrity, and availability of the company's networks, applications, and computer systems.Key Responsibilities:Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure...

  • Senior Network and Cyber Security Specialist

    3 weeks ago

    Chicago, Illinois, United States EZ Blockchain, LLC Full time

    ROLE AND RESPONSIBILITIESAs a key member of our team at EZ Blockchain, LLC, the Senior Network and Cyber Security Specialist will be responsible for designing, implementing, and maintaining the company's network infrastructure. This includes installing, configuring, and troubleshooting network equipment, as well as developing and enforcing security standards...

  • Product Cyber Security Architect

    1 month ago

    Chicago, Illinois, United States S&C Full time

    Job DescriptionWe are seeking a highly skilled Cyber Security Architect to champion information security for S&C's cyber security vision for product development, including embedded IOT devices and cloud-based applications.The ideal candidate will have a technical understanding of cyber security best practices, implementation, and the ability to clearly...

  • Cyber Security Analyst

    4 weeks ago

    Chicago, Illinois, United States RKON inc Full time

    About RKON Inc.RKON Inc. is an ISO27001 and AICPA SOC 2 Type II certified company that specializes in providing IT migration and transformation services for the Mergers and Acquisitions market.We have a proven track record for finding and developing top talent with people that believe they can achieve something greater.We also pride ourselves on fostering an...

  • Product Cyber Security Architect

    4 weeks ago

    Chicago, Illinois, United States S&C Electric Full time

    We are seeking a highly skilled Cyber Security Expert to champion information security for S&C's cyber security vision for product development, including embedded IOT devices, cloud-based, desktop, and mobile applications.The ideal candidate will have a technical understanding of cyber security best practices, implementation, and the ability to clearly...

  • Product Cyber Security Architect

    4 weeks ago

    Chicago, Illinois, United States S&C Electric Full time

    We are seeking a highly skilled Cyber Security Architect to champion information security for S&C's cyber security vision for product development, encompassing embedded IoT devices, cloud-based, desktop, and mobile applications.The ideal candidate will possess a deep understanding of cyber security best practices, implementation, and the ability to clearly...

  • Cyber Security Solutions Sales Executive

    1 month ago

    Chicago, Illinois, United States Cymulate Ltd Full time

    Cymulate's Continuous Security Validation enables companies to challenge, assess and optimize their cyber-security posture against the evolving cyberthreat landscape, simply and continuously.As a key member of our sales team, you will be responsible for prospecting new business opportunities into mid-market and enterprise accounts, consistently meeting or...

  • Cyber Security Operations Consultant

    4 weeks ago

    Chicago, Illinois, United States Wilson Sporting Goods Co. Full time

    Cyber Security Operations ConsultantAmer Sports is a dynamic, global sports company offering passionate achievement-oriented professionals the chance to succeed and flourish in an international environment.We are seeking a skilled Cyber Security Analyst to join our team and help to drive the company's cyber security strategy in all aspects.This role will be...

  • Cyber Security Relationship Manager

    4 weeks ago

    Chicago, Illinois, United States Trident Search Full time

    Cyber Security Relationship ManagerThis role requires a dynamic, consultative seller with excellent relationship management skills to manage and improve existing relationships as well as sell into and win new customers for the firm.The ideal candidate will have a good understanding of the Cyber Security Incident Response, DFIR market and be able to work with...

  • Cyber Security Analyst Position

    4 weeks ago

    Chicago, Illinois, United States Chicago White Sox Full time

    We are seeking a highly skilled Cyber Security Analyst to safeguard our digital assets and protect sensitive information. The ideal candidate will hold a Certified Information Security Manager (CISM) certification and have extensive experience in security technologies such as firewalls, intrusion detection/prevention systems, antivirus software, and...

  • Cyber Security Specialist

    3 weeks ago

    Chicago, Illinois, United States Addison Group Full time

    Job OverviewWe are seeking a highly skilled Cyber Security Specialist to join our team at Addison Group. As a key member of our security team, you will be responsible for defending our organization from cyber security threats and risks facing any organizational asset or business function.Key Responsibilities:Security Systems Management and Administration:...

  • Cyber Security Sales Executive

    1 month ago

    Chicago, Illinois, United States Darktrace Limited Full time

    About Darktrace LimitedFounded by mathematicians and cyber defense experts in 2013, Darktrace is a global leader in AI-powered cyber security solutions. Our mission is to protect organizations from the world's most complex threats, including ransomware, cloud, and SaaS attacks.Job DescriptionWe are seeking a highly motivated and experienced sales...

  • Senior Cyber Security Network Engineer

    4 weeks ago

    Chicago, Illinois, United States Nielsen Consumer LLC Full time

    Job DescriptionNielsen Consumer LLC is seeking a highly skilled Cyber Security Network Engineer to join our team. As a key member of our security team, you will be responsible for maintaining current technologies while working toward implementing more sophisticated means of visibility and control of network traffic.This position will involve working closely...

  • Cyber Security Specialist

    4 weeks ago

    Chicago, Illinois, United States Society of Actuaries Research Institute Full time

    Cyber Security SpecialistYour Purpose:The Cyber Security Specialist is responsible for defending the organization from cyber security threats and risks facing any organizational asset or business function, while pro-actively monitoring the environment and enforcing security standards and procedures. Recommends changes to the organization's technology...

  • Cyber Security Consultant

    4 weeks ago

    Chicago, Illinois, United States Aon Full time

    Cyber Security Consultant Role OverviewAon is seeking a highly skilled Cyber Security Consultant to join our Cyber Solutions team. As a Cyber Security Consultant, you will be responsible for evaluating and analyzing actions that lead to more effective risk management of cyber risks, and more effective cyber risk transfer solutions.Key Responsibilities:...

  • Senior Cyber Security Network Engineer

    1 month ago

    Chicago, Illinois, United States Nielsen Consumer LLC Full time

    Job SummaryWe are seeking a highly skilled Cyber Security Network Engineer to join our team at Nielsen Consumer LLC. As a key member of our security team, you will be responsible for maintaining and operating current network security tools, as well as implementing new means of visibility and control of network traffic.This is a critical role that requires a...

  • Cyber Security Professional

    4 weeks ago

    Chicago, Illinois, United States Bank of America Full time

    Job Description:Bank of America is seeking a skilled cyber security professional to join our Purple Team function within the Cyber Threat Hunt, Intelligence and Defense organization.As a Purple Team member, you will assist in the review, development, testing, and implementation of security initiatives across a large and complex environment.You will support...