{"id":1637631,"url":"https://alion.io/job/supernova-technology-senior-information-security-engineer","title":"Senior Information Security Engineer","company":{"id":3854034,"name":"Supernova Technology","domain":"supernovatechnology.com","url":"https://alion.io/company/supernova-technology","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":70,"open_postings":12,"ghost_share":0.5,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-27T14:33:42Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-11T17:51:13Z","board_verified":true,"closed_at":null,"days_open":45,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":44},"description":"About Supernova Technology\nFounded in 2014, we offer the industry’s first and only cloud-based, fully-customizable, end-to-end software solution to automate securities-based lending from origination through the life of the loan. By combining thought leadership in suitability and risk management with industry-leading education and the latest technology, Supernova enables advisors to deliver holistic, goals-based advice and to help their clients achieve financial wellness. We partner with the industry’s largest banks, most prominent insurance companies and leading online brokerages to democratize access to securities-based lending and better the entire financial ecosystem.\nWhy Join Supernova?\nAt Supernova Technology, we believe that the best results come from a team that is passionate, driven, and supported in all aspects of their professional lives. Here, you’ll work alongside talented and innovative individuals who are committed to driving the future of securities-based lending technology. We foster a culture of collaboration, continuous learning, and growth, where each person’s contributions make a real impact.\nAbout the Role\nWe are seeking a highly skilled and hands-on Senior Security Engineer to help protect Supernova’s financial technology platform and enterprise environment. This senior individual-contributor role combines proactive threat hunting, detection engineering, incident response, and ownership of critical security technologies and infrastructure.\nThe successful candidate will be a trusted technical leader capable of operating independently, making sound risk-based decisions, and leading complex security projects from requirements and design through implementation, testing, documentation, and ongoing operation. You will work across endpoint, identity, network, cloud, application, and SaaS environments to identify threats, strengthen controls, and continually improve Supernova’s security posture.\nThis role is well suited for someone who enjoys both investigating sophisticated security activity and building the systems, integrations, and processes needed to prevent, detect, and respond to it.\nResponsibilities\nThreat Hunting & Detection\nRun hypothesis-driven and intelligence-led threat hunts across endpoint, network, identity, cloud, email, application, and SaaS telemetry, analyzing large datasets to surface suspicious behavior, control gaps, and emerging attack techniques.\nTurn threat intel and adversary TTPs into hunt hypotheses and detection logic; build and tune SIEM queries, correlation rules, dashboards, and alerts aligned to MITRE ATT&CK.\nConvert hunt findings and incident lessons into durable detections, prevention controls, and playbooks; continuously evaluate detection coverage, false-positive rates, and telemetry quality.\nTrack emerging threats relevant to financial services, cloud, and software supply chains.\nSecurity Engineering & Platform Ownership\nDesign, implement, test, and own security technologies end-to-end, including SIEM, EDR/XDR, IDS/IPS, firewalls, WAF, vulnerability management, email security, identity protections, and automation, from requirements and design through deployment, documentation, post-implementation validation, and ongoing operation.\nStrengthen security across AWS, Microsoft 365, Entra ID, Windows, macOS, Linux, containers, and SaaS, partnering with infrastructure, IT, and engineering teams.\nImprove endpoint and identity controls: secure configuration, conditional access, least privilege, account lifecycle, and credential hygiene.\nMaintain documentation, standards, and runbooks for owned systems; manage vendor relationships.\nIncident Response & Vulnerability Management\nAct as the senior technical escalation point and lead incident response, including triage, scoping, containment, eradication, recovery, evidence preservation, root-cause analysis, and lessons learned across endpoint, identity, network, cloud, email, and application environments.\nBuild and test IR playbooks for high-risk scenarios.\nLead vulnerability management, including identification, validation, risk-based prioritization, remediation coordination, retesting, and closure, partnering with system owners to track risk through resolution.\nCoordinate security assessments, pen testing, and adversary simulation as needed.\nAutomation & Continuous Improvement\nBuild scripts, integrations, and automated workflows (Python, PowerShell, APIs) to improve visibility and reduce manual effort.\nEstablish security metrics (detection coverage, remediation performance, incident trends) and use them to drive improvement.\nOwn and improve network security controls, including firewall policies, VPN and secure connectivity, segmentation, traffic filtering, and associated monitoring. Review proposed systems, integrations, and architecture changes to define practical, risk-based security requirements.\nEvaluate AI-assisted security workflows responsibly, with safeguards for sensitive data and human validation.\nCollaboration & Leadership\nLead cross-functional security initiatives and act as a trusted advisor to engineering, IT, legal, and business teams, including during high-impact incidents with incomplete information.\nMentor junior team members and help build repeatable team practices.\nSupport audits/assessments and help maintain policies and standards aligned to NIST, ISO 27001, SOC 2, and financial-services requirements.\nQualifications\n5+ years in security engineering, threat hunting, detection engineering, security operations, incident response, or infrastructure security.\nProven ability to independently lead complex technical projects end-to-end.\nHands-on experience with enterprise security platforms (SIEM, EDR/XDR, firewalls, IDS/IPS, WAF, vuln management, email/identity security) and threat hunting across varied telemetry.\nStrong knowledge of attacker TTPs, IR processes, and MITRE ATT&CK.\nSolid grasp of network security fundamentals (segmentation, firewalls, VPNs, DNS, HTTP/TLS, access control).\nExperience securing cloud/enterprise environments (AWS, M365, Entra ID, Windows, macOS, Linux preferred).\nScripting/automation ability (Python, PowerShell, Bash, REST APIs).\nStrong analytical skills with incomplete/ambiguous information, and excellent communication with technical and non-technical audiences.\nHigh integrity and discretion with privileged systems and sensitive investigations.\nFintech, financial services, or other regulated tech experience preferred.\nFamiliarity with tools like CrowdStrike, Microsoft Defender, Splunk, Rapid7, Palo Alto, Fortinet, Cisco, or Cloudflare preferred.\nAWS security services, cloud-native detection, and Docker/ECS or comparable container-security experience preferred.\nDevSecOps practices (SAST, DAST, SCA, secrets detection, CI/CD, IaC) preferred.\nDigital forensics, malware analysis, or offensive security experience preferred.\nSOAR/detection-as-code pipeline experience preferred.\nThreat intel platforms and OSINT techniques preferred.\nRelevant degree or certifications (CISSP, GCIH, GCIA, GCFA, GNFA, OSCP, CCSP, AWS Security Specialty, etc.) preferred.\nOur Employee Benefits\nAt Supernova Technology, we provide a robust benefits package to support the health and well-being of our employees. Our offerings include:\nMedical, Dental, and Vision Insurance: Multiple plans with coverage for employees and dependents.\nHSA and FSA Accounts: Tax-advantaged accounts for health and dependent care expenses.\nLife and Disability Insurance: Employer-paid basic coverage with options for additional voluntary coverage.\nCompensation: $110,000 - $140,000 per year\nRetirement Savings: 401(k) plan with employer contributions.\nEmployee Assistance Program (EAP): Confidential support services, including free therapy sessions.\nPaid Time Off: Flexible PTO policies.\nAdditional Perks: Commuter benefits, pet insurance, continuing education assistance, and more.\nNote: Actual salary at the time of hire may vary and may be above or below the range based on various factors, including but not limited to, the candidate's relevant qualifications, skills and experience, and the location where this position may be filled.\nJoin us and make an impact while growing your career at Supernova!","description_format":"text","description_chars":8221,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Education assistance","Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-01T21:40:09Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.402,"p_room":0.45,"age_days":43,"expected_fill_days":22,"reasons":["conf:1","stale_co","win:tail"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/supernova-technology-senior-information-security-engineer","json_url":"https://alion.io/job/supernova-technology-senior-information-security-engineer.json","meta":{"generated_at":"2026-10-11T20:29:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8520,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854034},"rest":"https://alion.io/mcp/rest/get_company?id=3854034"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsupernova-technology-senior-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsupernova-technology-senior-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsupernova-technology-senior-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/supernova-technology-senior-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsupernova-technology-senior-information-security-engineer"}]}