3 days ago
Chicago, IL, USAMid Level
Base Salary
$110k - $120k/yr
Responsibilities
- Engineer and improve cloud and infrastructure security controls covering networking, identity, logging, encryption, and configuration baselines.
- Improve security tooling coverage, identify gaps, and establish secure defaults and guardrails for engineering teams.
- Run vulnerability management from ingestion and triage through prioritization, remediation coordination, exception handling, and closure.
- Tune detections, respond to security events, maintain incident response runbooks, conduct tabletop exercises, and participate in security on-call if applicable.
- Build and improve IAM processes including provisioning automation, access reviews, least privilege, RBAC, SSO, and joiner/mover/leaver controls.
- Review application code and infrastructure-as-code changes for security risks and create reusable secure patterns, templates, and automated checks.
- Use language models and agents to support security work and assess AI tools and agents for access, data handling, credentials, logging, prompt injection, and data-exfiltration risks.
- Explain security risks to engineers, executives, and auditors and support SOC 2 and ISO 27001 evidence requests with GRC.
Requirements
- At least 3 years of cybersecurity experience in a SaaS company or equivalent experience.
- Hands-on security engineering experience in a cloud environment, with AWS preferred.
- Ability to read code and infrastructure as code such as Terraform or CloudFormation and languages such as Python, Go, or TypeScript.
- Practical experience with vulnerability management and incident response.
- Working knowledge of IAM principles including least privilege, RBAC, SSO, access reviews, and joiner/mover/leaver processes for people, service accounts, and agent identities.
- Working knowledge of security risks and uses of AI systems.
- Strong written and verbal communication skills.
- Preferred: relevant certification such as CISSP or an AWS security certification.
- Preferred: experience with SIEM, EDR, CSPM, vulnerability scanning, or IdP tooling; security workflow automation through scripting or APIs; LLM-based applications or agents; NIST CSF, CIS Benchmarks, OWASP, OWASP LLM Top 10, or MITRE ATT&CK; tabletop exercises; or incident leadership.
Benefits
- Base salary is $110,000-$120,000 annually, with options, medical, dental and vision coverage, short- and long-term disability, life insurance, 11 paid holidays, flexible vacation, commuter benefits, a 401(k) plan and match, and paid parental leave.
About Vibes
Vibes builds a mobile customer engagement platform used by enterprise marketers to run high-volume SMS, MMS, RCS, and mobile wallet programs via APIs. The privately held company, founded in 1998 and headquartered in Chicago, sells its software and messaging services on a SaaS basis. Brands such as Chipotle, Kohl’s, and Polo Ralph Lauren use Vibes to manage personalized messaging and loyalty communications at scale.