Senior Cybersecurity Vulnerability/Exposure Engineer

Location: Chicago, Illinois, United States of America; four days in the office under a flex/hybrid model. Candidates must be legally authorized to work in the United States without current or future employer sponsorship.

Base salary: $130,900–$169,400 annually, plus potential incentive compensation and long-term equity participation.

Company

Financial market infrastructure provider delivering trading, clearing, and investment solutions to market participants worldwide.

What you will do

• Execute and continuously improve a risk-based vulnerability management program for global IT infrastructure.
• Analyze scan results, assess enterprise risk, and coordinate remediation with infrastructure, application, and platform teams.
• Design, operate, and maintain vulnerability scanning and assessment infrastructure.
• Automate vulnerability detection, analysis, remediation tracking, reporting, and security-tool integrations.
• Provide senior escalation support, risk prioritization, remediation guidance, and risk-acceptance recommendations.
• Lead vulnerability management discussions and present risk, trends, and escalations to technical stakeholders and management.

Requirements

• At least 5 years of information security experience, or 3 years in security plus 2–3 years in core IT administration.
• Expert hands-on experience with vulnerability management, CSPM, SSPM, and cloud/SaaS security platforms such as Qualys, Tenable, Rapid7, Wiz, Prisma, Reco, Obsidian, Valence, AppOmni, or Aqua.
• Strong practical Python scripting and automation experience, including security operations, tool integrations, and data analysis.
• Advanced use of AI productivity and workflow tools, including Copilot, ChatGPT, Claude Code, Cursor, or N8N.
• Experience with Linux/Unix, Windows, Active Directory, Entra ID, managed network devices, Microsoft security tools, Jira, Confluence, and reporting platforms.
• Strong English communication skills and legal authorization to work in the United States without visa sponsorship are required.

Nice to have

• Bachelor’s or advanced degree in cybersecurity, computer science, engineering, or another technical field.
• Centralized systems administration experience in Windows, Linux, networking, or firewall management.
• Security certifications such as GPEN, Security+, CISSP, OSCP, CEH, or LPT.
• Experience creating and applying AI tooling to solve security and operational problems.

Culture & Benefits

• Flexible hybrid work environment with four days in the office for this role.
• Health, dental, vision, telemedicine, and mental health benefits.
• Paid vacation, personal, sick, parental, and community service leave.
• Immediate 2:1 401(k) match up to 8%, employee stock purchase plan, and tax savings accounts.
• Tuition assistance, education opportunities, office meals and refreshments, gyms, charitable matching, and volunteer programs.