Sr. Information Security Engineer

Overview Founded in 1898 and headquartered in Chicago, IL, GATX Corporation (NYSE: GATX) is an industry leader with 125+ years of success—success that is powered by our people. At GATX, we hire the best and offer our employees a dynamic, energetic, collaborative environment to enable them to make an impact from day one. Enjoy the perks and benefits of a global company with the close-knit culture and community of a much smaller one. In the same way we strive to empower our customers to propel the world forward, we are dedicated to providing our people with the tools and resources they need to advance in their careers. GATX is seeking a Senior Information Security Engineer to provide technical leadership for cybersecurity initiatives that protect the organization's data, systems, and cloud environments. This role partners across IT and the business to reduce cyber risk, strengthen security controls, and advance the maturity of the cybersecurity program. Responsibilities Develop and maintain security standards and guidelines that protect company systems, data, and networks. Manage security tools, software, and the implementation of new controls, including the design and maintenance of complex cybersecurity controls throughout the system lifecycle. Support initiatives that reduce evolving cyber risk by applying a strong understanding of the organization’s threat landscape. Partner with cross-functional teams to develop incident response plans and protocols. Oversee vulnerability assessments and penetration testing to identify system and network weaknesses and coordinate with IT teams to remediate issues. Monitor networks and systems for security incidents, take action to reduce the risk of data loss or unauthorized access, and investigate events by analyzing data, coordinating response efforts, and reporting findings to management and IT teams. Lead the development and deployment of advanced identity protection capabilities in Entra IAM to strengthen security and align with best practices. Improve authentication security in alignment with Zero Trust principles and increase resilience against identity-based threats. Own administration of BeyondTrust PAM, Entra IAM, including secure configuration, timely updates, and user support. Partner with IT teams to expand identity platform integrations and improve efficiency in identity and privileged access management. AWS Security Administration Security Management: Implement IAM policies, manage access controls, and ensure compliance with security best practices Automation & Scripting: Automate routine tasks using tools like AWS CLI, CloudFormation, or Terraform Collaboration: Work with development teams to support CI/CD pipelines and scalable application deployments in a secure manner. Collaborate in securely implementing Microsoft Azure Solutions in a multi-tenant cloud environment. Working closely with LAN Administrators responsible for building and maintaining various technical…