ZipRecruiter

Log In

1

Secops Jobs in Illinois (NOW HIRING)

Coinflow

Security Engineer

Chicago, IL · On-site

$145K - $195K/yr

You'll build the SecOps backbone, hunt for weaknesses in our own stack before anyone else does, and partner with engineering to keep our SDLC fast and secure. This role reports to the CTO and has a ...

Kirkland & Ellis LLP.

SIEM Engineer II

Chicago, IL · On-site

$133K - $166K/yr

SIEM Platform Support - Assist in the implementation, administration, and ongoing optimization of the Firm's SIEM platform (e.g., Google Security Operations (SecOps), Splunk, Exabeam, Microsoft ...

BDO

ServiceNow Architect

Oak Brook, IL · Remote

Experience with ServiceNow modules, ITSM, ITOM, PM, HRSD, CSM, SecOps, (IRM, TPRM, BCM, etc.), preferred * Four (4) or more years of experience in JavaScript, HTML, CSS, and ServiceNow scripting ...

BDO USA

ServiceNow Architect

Oak Brook, IL · On-site

Experience with ServiceNow modules, ITSM, ITOM, PM, HRSD, CSM, SecOps, (IRM, TPRM, BCM, etc.), preferred * Four (4) or more years of experience in JavaScript, HTML, CSS, and ServiceNow scripting ...

CDIT LLC

ISSO

Scott Air Force Base, IL · On-site

... SecOps to validate control implementations • Develop Security Assessment Plans (SAPs) and support SAR coordination • Draft supply chain risk management plans • Support the Cybersecurity ...

RSM

ServiceNow Engagement Manager

Chicago, IL · Remote

Experience with ServiceNow modules such as ITSM, ITOM, CSM, HRSD, SecOps, GRC, or other relevant ServiceNow products. * Experience contributing to business development, account growth, proposals, and ...

New

previous pagenext page

Showing results 21-40

All JobsSecops JobsSecops Jobs in Illinois

Secops information

See Illinois salary details

$14.5K

$233.8K

$375K

How much do secops jobs pay per year?

As of Aug 22, 2026, the average yearly pay for secops in Illinois is $233,821.00, according to ZipRecruiter salary data. Most workers in this role earn between $193,800.00 and $290,700.00 per year, depending on experience, location, and employer.

How to get into Secops?

To enter a Security Operations (SecOps) role, candidates typically need a strong understanding of cybersecurity principles, network security, and incident response. Relevant skills include familiarity with security tools like SIEM systems, firewalls, and intrusion detection systems, along with certifications such as CompTIA Security+ or CISSP. Gaining hands-on experience through internships, labs, or entry-level cybersecurity positions can also facilitate entry into SecOps roles.

What does a Secops engineer do?

A Secops engineer is responsible for managing and implementing security operations within an organization, including monitoring networks for threats, responding to security incidents, and maintaining security tools like intrusion detection systems and firewalls. They analyze security data, develop incident response plans, and ensure compliance with security policies, often using tools such as SIEM platforms. Strong knowledge of cybersecurity principles, scripting skills, and relevant certifications are typically required for this role.

What are the most commonly searched types of Secops jobs in Illinois?

The most popular types of Secops jobs in Illinois are:

What are popular job titles related to Secops jobs in Illinois?

For Secops jobs in Illinois, the most frequently searched job titles are:

What job categories do people searching Secops jobs in Illinois look for?

The top searched job categories for Secops jobs in Illinois are:

What cities in Illinois are hiring for Secops jobs?

Cities in Illinois with the most Secops job openings:

Secops jobs near you
Infographic showing various Secops job openings in Illinois as of August 2026, with employment types broken down into 97% Full Time, and 3% Contract. Highlights an 72% Physical, 5% Hybrid, and 23% Remote job distribution, with an average salary of $233,821 per year, or $112.4 per hour.

Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations

West Monroe

Chicago, IL • On-site

Full-time

Re-posted 7 days ago

Job description

Are you ready to make an impact?
West Monroe is seeking a Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations to join our Cybersecurity & Enterprise Technology practice. This role is focused on helping clients modernize security operations by designing next-generation SOC capabilities that leverage automation, AI-enabled workflows, agentic security operations, advanced analytics, SIEM/SOAR platforms, threat intelligence, and scalable detection and response processes.
You will help clients move beyond traditional, manually intensive SOC models toward more intelligent, automated, and resilient security operations. This includes assessing current-state SOC capabilities, rationalizing fragmented tooling, designing future-state operating models, defining agent-assisted workflows, improving detection engineering, automating investigation and response processes, and enabling measurable improvements in analyst productivity, detection coverage, and response effectiveness.
You will serve as a trusted advisor to CIOs, CISOs, security operations leaders, technology executives, and cyber defense teams as they transform fragmented security operations into scalable, intelligence-driven, AI-enabled, and human-governed SOC capabilities.
While this role will support clients across industries, there is a strong preference for candidates with experience modernizing SOC capabilities for Energy & Utilities clients, including electric, gas, water, and other critical infrastructure environments. Experience supporting Financial Services, Healthcare, Private Equity, and other highly regulated sectors is also valuable where security operations, regulatory requirements, operational resilience, and risk reduction are critical.
Experience with Google Security Operations / Google SecOps is a plus, but this role is intended to be broader than any single platform. The ideal candidate understands how to design modern SOC capabilities across people, process, data, governance, automation, AI, and technology.
What You'll Do
Lead Agentic SOC Modernization Strategy
  • Assess current-state security operations capabilities across people, process, technology, data, governance, automation, and operating model dimensions.
  • Define future-state SOC operating models that incorporate AI-assisted investigation, agentic workflows, automated enrichment, response orchestration, human-in-the-loop decisioning, and continuous improvement.
  • Develop SOC modernization roadmaps aligned to business risk, cyber maturity, regulatory obligations, operational resilience goals, staffing models, and technology investments.
  • Identify opportunities to reduce alert fatigue, improve analyst efficiency, accelerate investigation and response, increase detection coverage, and improve the quality of security outcomes.
  • Evaluate where AI agents, automation, analytics, and orchestration can improve SOC workflows without introducing unacceptable operational, privacy, security, or governance risk.
  • Facilitate executive workshops and working sessions with security leadership, infrastructure, cloud, data, application, compliance, risk, and operations stakeholders.

Design AI-Enabled and Agentic SOC Capabilities
  • Architect AI-enabled SOC capabilities that support alert triage, evidence gathering, enrichment, summarization, detection authoring, threat hunting, response recommendation, case management, and executive reporting.
  • Define agentic SOC use cases that improve security operations outcomes, including autonomous or semi-autonomous investigation support, alert correlation, threat intelligence enrichment, detection tuning, playbook execution, and analyst decision support.
  • Design human-in-the-loop controls, escalation points, approval gates, logging, monitoring, and quality assurance processes for agentic security operations.
  • Develop operating models for how analysts, engineers, incident responders, threat hunters, SOC managers, and AI-enabled tools work together across the detection and response lifecycle.
  • Advise clients on responsible and secure use of AI in security operations, including access control, data protection, model governance, prompt security, output validation, auditability, and operational risk management.
  • Help clients define practical AI-enabled SOC use cases that improve detection, response, analyst productivity, cyber resilience, and executive visibility.

Modernize SIEM, SOAR & Detection Engineering
  • Architect and improve SIEM, SOAR, security analytics, and case management capabilities across platforms such as Splunk, Microsoft Sentinel, Google SecOps, Palo Alto Cortex, ServiceNow SecOps, CrowdStrike, and similar technologies.
  • Build detection engineering strategies aligned to MITRE ATT&CK, threat intelligence, business-critical assets, regulatory priorities, OT/ICS risk scenarios, and client-specific threat models.
  • Design alert triage, enrichment, escalation, case management, automated response, and incident workflow capabilities.
  • Define threat hunting, detection lifecycle management, detection-as-code, tuning, content governance, and use-case performance measurement practices.
  • Establish SOC metrics and KPIs, including mean time to detect, mean time to respond, alert quality, false positive reduction, automation rates, detection coverage, analyst productivity, and operational resilience.
  • Develop implementation roadmaps that sequence telemetry onboarding, detection use cases, automation opportunities, workflow changes, analyst enablement, and operational adoption.

Rationalize Security Tooling, Telemetry & Data Sources
  • Evaluate security tool portfolios to identify overlapping capabilities, integration gaps, consolidation opportunities, and replace/retain decisions.
  • Assess SIEM, SOAR, XDR, EDR, threat intelligence, vulnerability management, cloud security, identity, ticketing, and workflow platforms to determine how they support future-state SOC capabilities.
  • Define ingestion strategies for enterprise telemetry, cloud logs, endpoint data, identity data, network data, SaaS platforms, vulnerability data, application logs, OT/ICS data, and third-party security sources.
  • Design normalized data models, parsing strategies, correlation logic, enrichment pipelines, analytics workflows, reporting capabilities, and evidence collection processes.
  • Develop cost, capability, integration, and operational impact analyses to support security tool modernization decisions.
  • Partner with technology, procurement, finance, security, and risk stakeholders to build actionable tooling roadmaps aligned to renewal windows, architecture dependencies, budget constraints, and business priorities.
  • Integrate enterprise and OT telemetry into unified SOC monitoring and response environments where applicable.

Strengthen SOC Governance, Risk & Compliance Alignment
  • Align SOC modernization efforts to frameworks and regulatory requirements such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, and other industry-specific obligations.
  • Design control validation, audit readiness, evidence collection, logging, monitoring, and reporting capabilities within security operations workflows.
  • Ensure security monitoring, detection, response, and logging strategies support compliance, resilience, cyber risk management, and executive reporting objectives.
  • Define governance models for detection content ownership, playbook approval, automation changes, AI-enabled workflows, exception management, escalation paths, and continuous improvement.
  • Translate complex technical recommendations into executive-level narratives focused on business risk, operational resilience, investment priorities, and measurable outcomes.

Support Google SecOps and Other Modern SOC Platforms
  • Support clients evaluating, designing, or implementing modern SOC platforms, including Google Security Operations / Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, and comparable technologies.
  • Conduct capability assessments, platform fit analyses, and replacement/retain evaluations for legacy SIEM/SOAR and adjacent security tools.
  • Advise clients on migration considerations from legacy SIEM/SOAR platforms to modern SOC platforms while managing continuity, regulatory requirements, operational risk, and analyst adoption.
  • Where applicable, design Google SecOps-enabled capabilities for SIEM, SOAR, threat detection, investigation, response, security analytics, and data ingestion.
  • Define platform implementation roadmaps, including onboarding waves, integration priorities, detection sequencing, automation opportunities, reporting requirements, and operational adoption plans.

Drive Client & Practice Impact
  • Serve as a trusted advisor to client executives, security operations leaders, SOC managers, security engineers, and technology stakeholders.
  • Lead architecture workshops, SOC maturity assessments, platform assessments, operating model design, tooling rationalization, and modernization planning engagements.
  • Support proposal development, solution design, estimation, delivery planning, and client presentations.
  • Contribute to West Monroe thought leadership, reference architectures, accelerators, and delivery methods for Agentic SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, and cyber defense modernization.
  • Mentor team members and help grow West Monroe's capabilities in modern security operations, AI-enabled cyber defense, SOC transformation, and security platform modernization.
  • Leverage AI tools to accelerate analysis, synthesize compleec information and support date-driven recommendations for clients, exercising sound judgment of client outcomes .

What You Bring
  • 7-10+ years of experience in security architecture, security operations, SOC modernization, SIEM/SOAR engineering, detection engineering, incident response, security automation, or cybersecurity consulting.
  • Experience designing, implementing, or modernizing SOC capabilities in enterprise, regulated, or critical infrastructure environments.
  • Strong understanding of modern SOC operating models, including detection engineering, alert triage, investigation workflows, threat hunting, incident response, case management, escalation processes, and security operations governance.
  • Experience designing AI-enabled or automation-enabled security operations capabilities, including analyst assist, enrichment, alert summarization, workflow orchestration, response automation, or agentic SOC use cases.
  • Strong understanding of SIEM, SOAR, XDR, security telemetry, log ingestion, data normalization, correlation, enrichment, detection content, case management, and incident response workflows.
  • Experience assessing, rationalizing, and consolidating enterprise cybersecurity tools and developing actionable modernization roadmaps.
  • Familiarity with enterprise security technologies such as EDR/XDR, IAM, PAM, cloud security, network security, vulnerability management, threat intelligence, DLP, ITSM, and SecOps workflow platforms.
  • Experience integrating security data from cloud, endpoint, identity, network, application, SaaS, infrastructure, and third-party sources.
  • Ability to design SOC operating models, analyst workflows, escalation paths, governance processes, control points, and performance metrics.
  • Familiarity with AI-enabled security operations, automation, analytics, responsible AI, and operational governance considerations.
  • Experience with governance, risk, and compliance frameworks such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, or related standards.
  • Strong executive communication, stakeholder engagement, facilitation, and consulting skills.
  • Ability to translate business risk and operational objectives into secure, scalable, and practical security operations architectures.
  • Willingness to travel for client engagements between 30 to 50%
  • Hybrid role 2x per week in office
  • Experience integration AI tools(e.g.,ChatGPT) into day to day workflows to enhance productivity and insight generation, coupled with strong critical thinking to acesss accuracy, mitigate bias, and ensure high-quality outputs.
  • Must be eligible to work in the United States without the need for sponsorship now or in the future

Preferred / Plus Qualifications
  • Prior consulting experience in a client-facing advisory or delivery leadership role.
  • Experience with Google Security Operations / Google SecOps, Chronicle SIEM, Chronicle SOAR, Google Cloud security services, BigQuery, data pipelines, or security analytics architectures.
  • Google Security Operations, Google Cloud, or related security certifications.
  • Experience migrating from legacy SIEM/SOAR platforms to Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, or other modern SOC platforms.
  • Experience with platforms such as Splunk, Microsoft Sentinel, Google SecOps, ServiceNow SecOps, Palo Alto Cortex, CrowdStrike, Okta, SailPoint, Mandiant, VirusTotal, Wiz, Prisma Cloud, or similar enterprise security tools.
  • Experience leading or supporting SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, security automation, or security operations improvement programs.
  • Experience s

Apply