Principal Security Engineer

Wilson Sonsini; United States; Remote; USD 147,000 - 199,000; Full time

Job summary

Wilson Sonsini is seeking a Senior Information Security professional to protect our networks and systems. This role can be 100% remote and focuses on SIEM, incident response, and cloud security across our technology landscape.

You will monitor, assess, and mitigate threats while aligning security with client needs and firm policies. Bachelor's degree and 5+ years in information security are required; certifications highly regarded.

Qualifications

• Bachelor's degree required.
• 5+ years in Information Security.
• GIAC, CISSP, CISM, CEH, or CIPP preferred.
• Focus on SIEM, Red Teaming, and Linux command line.
• Broad knowledge of SIEM, IDS/IPS, PKI, IDAM, antivirus and firewalls; EDR, threat intel, SOAR.

Responsibilities

• Provide information security expertise for networks and systems.
• Manage security technology: antivirus, vulnerability scans, IDS, content filtering, and insider threat systems.
• Review security events daily and follow incident response processes.
• Monitor threats and notify impacted parties for mitigation.
• Coordinate third-party security evaluations and recommendations.
• Align security with client needs for efficiency.
• Stay current on security technologies and recommendations.
• Design scalable operational environments for security products.
• Troubleshoot security tasks and support end users.
• Provide security consulting to other teams.
• Perform duties as assigned.
• Uphold company policies.

Skills

Information security

SIEM

Incident response

Linux

TCP/IP

Cloud security

Education

Bachelor's degree

Tools

EDR

IDS/IPS

PKI

IDAM

Antivirus

Firewalls

SOAR

Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.

This role can be 100% remote.

Essential Duties and Responsibilities:

• Provide subject matter expertise in information security as it relates to networks and systems
• Manage the Firm’s security technology including but not limited to: anti-virus, vulnerability scanning, intrusion detection, content filtering, and insider threat systems
• Review security events from all monitoring environments not integrated with the firm SIEM, and those events escalated by the SOC, on a daily basis, and follow defined incident response processes in their analysis and reporting
• Monitor appropriate venues for threats to the security of the Wilson Sonsini Goodrich & Rosati environment. Provide notification to all impacted parties related to the actions needed to mitigate threats and manage the threat lifecycle in totality
• Manage and lead evaluations of the firm’s environment by external 3rd parties. Produce recommendations that integrate any findings with the business needs of the firm
• Maintain knowledge of the information security needs of firm clients and implement measures to satisfy those requirements in the most efficient manner
• Keep abreast of emerging security technologies and discipline developments. Make appropriate recommendations that meet the firms needs
• Design and build operational environments that scale to meet the needs of our security products and assure appropriate reliability
• Support general troubleshooting related to information security tasks and provide support to end users as needed
• Provide other teams with security consulting services, including responding to requests for additional information and assisting with specific projects
• Perform related duties as assigned by supervisor
• Maintain compliance with all company policies and procedures

Education and/or Work Experience Requirements:

• Bachelor’s degree required
• 5+ of experience in Information Security
• One or more of the following certifications preferred: GIAC, CISSP, CISM, CEH, CIPP
• Focus on knowledge of direct support for Security Information and Event Management (SIEM) systems (e.g. configuration of feeds, developing alarm/report concepts), Red Teaming concepts and execution, and Linux skills including command line and operational/administrative usage
• Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls
• Experience with windows desktop, server, and database security
• Ability to identify security technology risks and perform incident response
• Extensive knowledge of TCP/IP networking including wireless, network monitoring/design and routing
• Extensive understanding of the cyber kill-chain
• Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private, and hybrid environments
• Experience working in a law firm or professional services firm environment desired
• Excellent verbal and written communication skills, including ability to effectively communicate with internal and external customers and communicate clearly and effectively with people from both technical and non-technical backgrounds
• The primary location for this job posting is in Los Angeles, but other locations may be listed. The actual base pay offered will depend upon a variety of factors, including but not limited to the selected candidate’s qualifications, years of relevant experience, level of education, professional certifications and licenses, and work location. The anticipated pay range for this position is as follows:

Los Angeles, Austin, Boston, Boulder, Century City, Delaware, Salt Lake City, San Diego, Seattle, Washington, D.C., and all other locations: $147,050 - $198,950 per year.New York, San Francisco: $163,200 - $220,800 per year.

The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.

Benefits information can be found here. Equal Opportunity Employer (EOE).