Information Security Engineer - Detection and Response

USA Alston & Bird; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

USA Alston & Bird is seeking an Information Security Engineer – Detection & Response in Atlanta, Georgia. The role involves safeguarding the firm against security threats and managing security technologies to enhance security posture.

The ideal candidate should have at least 3 years of experience with security systems, a broad technical background, and applicable certifications. Responsibilities include monitoring threats, incident response, and providing user security education.

Qualifications

• Minimum of 3 years operational support experience required.
• Experience with security systems administration and cloud technologies.
• Applicable certifications (ISSEP/CISSP, GIAC) strongly preferred.

Responsibilities

• Support security operations of the firm.
• Administer and maintain the firm’s security systems.
• Investigate security incidents and provide education to users.

Skills

Effective communication with technical/non-technical individuals

Broad technical foundation

Knowledge of compliance requirements (ISO27001, HIPAA)

Multitasking ability

Quick learning of new applications

Organizational and self-management skills

Education

Associate or bachelor's degree (strongly preferred)

Tools

Vulnerability scanner

Endpoint detection and response

SIEM

Microsoft systems

Linux systems

Job description

Information Security Engineer – Detection & Response

Join our Information Security team as an Information Security Engineer – Detection & Response, where you’ll play a critical role in safeguarding the firm by monitoring and responding to security threats, managing and enhancing advanced security technologies, investigating incidents and phishing attempts, and partnering with technical and non‑technical stakeholders to strengthen our overall security posture in a dynamic, fast‑paced legal environment.

Responsibilities

• Support security operations of the firm.
• Administer and maintain the firm’s security systems, such as SIEM, malware analysis, XDR, anomaly detection, vulnerability scanners, anti‑virus, etc.
• Make recommendations and assist with configuration changes to existing systems to address newly identified vulnerabilities.
• Provide security education to users through phishing exercises.
• Proactively review security systems for indicators of compromise, violations of policy, and anomalous behaviors.
• Assist in investigations of security incidents as needed.
• Prepare and maintain documentation of systems managed by the Information Security team.
• Recommend, evaluate, and support security enhancements to management.
• Provide evidence for various compliance initiatives when required.
• Maintain current knowledge of industry‑recognized risks and possible security vulnerabilities as well as current security solutions.
• Provide backup support for other members of the Information Security team.
• Support initiatives and special projects of other Information Systems teams as required.
• Provide system hardening recommendations.
• Assist in troubleshooting of problems of various types.
• Support users.
• Respond to reports of incidents of compromise and malicious emails.
• Provide guidance regarding secure application and system configuration.
• Resolve security‑related calls referred by the Help Center when the calls are beyond the scope of the Help Desk.
• Assist with execution of security assessments by third parties.

Skills and Qualifications

• Ability to communicate effectively with technical and non‑technical individuals regarding security concerns, problems, and questions.
• Solid and broad technical foundation.
• Awareness of relevant compliance requirements (ISO27001, HIPAA, state privacy laws, etc.).
• Ability to multitask and switch focus among multiple different efforts quickly.
• Ability to quickly learn new applications and adjust to upgrades to existing applications.
• Excellent organizational and self‑management skills.

• Experience with administration of security systems (vulnerability scanner, endpoint detection and response, SIEM, etc.), networking protocols, Microsoft and Linux systems, cloud and mobile technologies.
• Associate or bachelor’s degree is not required but strongly preferred.
• Minimum of 3 years prior experience in a role focused on operational support is required.
• Applicable certifications (ISSEP/CISSP, GIAC) strongly preferred.
• Previous experience in the legal field is desired.

Equal Opportunity Employer

Alston & Bird LLP is an Equal Opportunity Employer and does not discriminate on the bases of any status protected under federal, state, or local law. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military service, veteran status, or other protected category under the law on the basis of race, color, religion, sex, age, sexual orientation, gender identity and/or expression, national origin, veteran status or disability in relation to our recruiting, hiring, and promoting practices.