Senior Information Security Engineer (Contract)

Job Description

About the Role

\n

Tokio Marine Highland is seeking an experienced Senior Security Engineer for an approximate 6-month contract to help strengthen and mature key components of our information security program. This role will design and implement security improvements, develop enterprise security standards, assess cloud security controls, and drive engineering initiatives that reduce risk while supporting business objectives.

\n

\n

This is an ideal opportunity for a hands-on security professional who enjoys solving complex technical challenges, improving security operations, and delivering measurable results in a collaborative environment.

\n

\n

Location: Chicago, IL (Hybrid, 3 days per week in office)

\n

\n

What You'll Accomplish

\n

During this engagement, you will:

\n

\n
• Develop and publish enterprise security standards for applications, APIs, and web services, including authentication, authorization, encryption, logging, vulnerability management, and secure development practices.
\n
• Conduct a comprehensive review of cloud security controls, identify security gaps, and deliver a prioritized remediation roadmap.
\n
• Design and implement security automation, integrations, or engineering improvements that improve security visibility, strengthen controls, and reduce manual effort.
\n

\n

\n

Key Responsibilities

\n

\n
• Design, implement, and enhance security controls, technologies, and engineering solutions across cloud, application, and infrastructure environments.
\n
• Provide technical security guidance to IT, business, and project teams.
\n
• Evaluate security architectures, technologies, and vendor solutions and recommend improvements to reduce risk and improve operational effectiveness.
\n
• Assess and improve cloud security configurations, identity and access management controls, and overall security posture.
\n
• Coordinate security assessments, penetration testing activities, and remediation efforts.
\n
• Support incident response activities through threat analysis, investigation, and remediation guidance.
\n
• Develop and maintain security standards, technical requirements, procedures, and related documentation.
\n
• Collaborate with internal and external stakeholders to ensure security requirements are incorporated into technology initiatives.
\n

\n

\n

What We're Looking For

\n

\n
• 7+ years of experience in cybersecurity, information security, security engineering, or related technical disciplines.
\n
• Strong background in security engineering, cloud security, application security, and security controls implementation.
\n
• Hands-on experience securing AWS environments.
\n
• Experience with Microsoft Entra ID and identity and access management principles.
\n
• Knowledge of application security, API security, secure development practices, and application security testing.
\n
• Experience with security automation, integrations, scripting, or process improvement initiatives.
\n
• Strong understanding of networking, operating systems, virtualization, firewalls, segmentation, and remote access technologies.
\n
• Experience supporting penetration testing, vulnerability remediation, incident response, and threat analysis.
\n
• Ability to assess technical risk and translate findings into practical recommendations.
\n
• Strong communication skills with the ability to explain complex technical concepts to a variety of audiences.
\n

\n

\n

Preferred Qualifications

\n

\n
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
\n
• Industry certifications such as CISSP, CCSP, GIAC, AWS, Microsoft Security, or similar credentials.
\n

\n

\n

Why Join Us?

\n

This role offers the opportunity to make a meaningful impact by helping shape security standards, strengthen cloud security controls, and deliver high-value security engineering improvements. The successful candidate will play a key role in advancing the organization's security capabilities while working on initiatives that have visible and lasting business value.

\n

\n

Work Authorization / Eligibility

\n

Vendors or independent contractors must be legally authorized to perform services in the United States. This contract opportunity is not eligible for visa sponsorship or company-sponsored work authorization now or in the future.

\n

\n

About Tokio Marine Highland

\n

Tokio Marine Highland is a managing general agency that offers distinct specialty risk management solutions, including private flood, fine art, specialty property, real estate investment, and lender-placed insurance.

\n

\n

Founded in 1962, Tokio Marine Highland is a wholly owned subsidiary of Tokio Marine Kiln (TMK), a leading specialist insurance underwriting business operating in the Lloyd’s insurance market and part of one of the world’s largest insurance groups, Tokio Marine. As one of the largest Lloyd’s syndicates, TMK benefits from Lloyd’s financial strength, including an A+ rating from AM Best.

\n

Tokio Marine Highland has office locations in Chicago, IL, Frisco, TX, Miami, FL, New York City, NY, and South Pasadena, CA. For more information, visit our website at

\n

\n

Tokio Marine Highland, LLC (TMH) is an Equal Opportunity Employer. TMH’s success depends heavily on the effective utilization of qualified people, regardless of their race, ancestry, religion, color, sex, national origin, sexual orientation, gender identity and/or expression, disability, veteran status, or any characteristic protected by law. As a company, we adhere to and promote equal employment opportunities for all.

\n

\n

Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is TMH’s policy to provide reasonable accommodation when requested by qualified individuals with disabilities during the recruitment process, unless such accommodation would cause an undue hardship. To make an accommodation request, please contact View email address on ziprecruiter.com.