Security Analyst

Goodwin Procter Boston; Los Angeles (CA); On-site; USD 111,500 - 167,300; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Retirement plan

Paid vacation and holidays

Professional development

Job summary

Goodwin Procter is seeking an Information Security Analyst to join the Global Operations Team in Santa Monica. You will support the firm’s security infrastructure, collaborate with colleagues across backgrounds, and help ensure the confidentiality, integrity, and availability of data and systems.

Responsibilities include operating, auditing, and improving security controls, assisting with threat detection and incident response, and driving security automation.

Qualifications

• Bachelor’s degree in information security, IT, or related field.
• Minimum 3 years of information security analyst experience.
• CISSP or equivalent security certification preferred.
• Proven knowledge of IT security frameworks and security technologies.
• Willingness to travel up to 1 week per quarter.

Responsibilities

• Operate, manage, audit, report, and engineer support for security systems infrastructure.
• Assist with security automation, threat detection engineering, and incident response.
• Provide internal security consulting to ensure data confidentiality, integrity, and availability.
• Review and implement new security platforms and promote security best practices.
• Maintain security metrics and oversee vulnerability management.
• Support incident response lifecycle and breach investigations.

Skills

IT security frameworks

SIEM knowledge

Firewall management

IDS/IPS

Vulnerability management

Scripting/Programming

Security automation

Cloud security (Azure/AWS)

Operating systems (Windows/macOS/Linux

Analytical skills

Education

Bachelor's degree

Tools

Splunk

Sentinel

Cisco

Palo Alto Networks

Tenable

Rapid7

Python

PowerShell

Node.js

LogicApps

Power Automate

Azure

AWS

Job description

Job Overview

Join Goodwin’s Global Operations Team and make a real impact on a global scale. This role supports the firm’s global business professionals by collaborating with colleagues across various backgrounds to deliver cutting‑edge solutions in high‑stakes litigation, regulatory compliance, advisory services, and complex transactions. Working under the Director, Information Security, you will manage the operation, implementation, management, auditing, reporting, and engineering support of Goodwin’s network and information security systems infrastructure.

What You Will Do

• Operate, implement, manage, audit, report, and engineer support for the firm’s network and information security systems infrastructure.
• Assist with security automation, threat detection engineering, risk assessments, vulnerability management, incident response, and disaster recovery testing.
• Provide internal consulting to project owners and technical resources to ensure the confidentiality, integrity, and availability of firm data and systems.
• Review, test, and implement new security technology platforms and advocate information security practices to all firm members.
• Identify new threats to IT systems and create rules to identify, prevent, and remediate them.
• Expand security auditing and ensure the proper ongoing operation of security tools.
• Create and maintain security policies, standards, guidelines, and other documentation for IT and business audiences.
• Maintain monthly security metrics to ensure proper service levels are maintained.
• Support the incident response lifecycle, including identification, triage, remediation, and communications for security breaches and malware infections.
• Identify latest security vulnerabilities, malware, breaches, and industry news that could affect the firm.
• Maintain the vulnerability management process, including identification, rating, remediation, and monitoring.
• Provide additional coverage for approvals and notifications to other IT groups for critical time‑sensitive operations such as firewall changes, password reset approvals, and application vetting.
• Assist with the automation of security processes, integration of security platforms, and creation of tools.
• Conduct ongoing reviews of access controls, investigate improper access, revoke access, report violations, monitor requests, and recommend improvements.
• Provide technical leadership for incident response capabilities, including malware analysis, breach investigation, and remediation efforts.
• Create internal training materials and other items to support the advancement of information security within the firm.
• Maintain awareness of industry trends and make recommendations for improving technology used by the firm.
• Participate in and/or manage cross‑functional team projects to implement new or updated technology.
• Cross‑train other IT staff in security best practices and in the use or maintenance of technology.
• Effectively manage small projects and display professionalism, quality service, and a "can do" attitude to internal members, external clients, and vendors.
• Assume additional responsibilities as assigned.

Who You Are

• Hold a Bachelor’s Degree or equivalent.
• Have a minimum of 3 years’ experience as an Information Security Analyst; CISSP or equivalent preferred.
• Possess expert knowledge of IT security frameworks and solutions.
• Engage actively in IT security forums inside and outside the legal industry.
• Demonstrate excellent technical communication skills and a strong desire to achieve customer satisfaction.
• Have operating knowledge of security configurations for security products including SIEM (Splunk, Sentinel), firewalls (Cisco, Palo Alto Networks), IDS/IPS (Cisco, Palo Alto Networks), NAC (Cisco, Aruba), vulnerability management (Tenable, Rapid7), and programming languages (Python, PowerShell, Node.js).
• Have experience with security automation tools such as LogicApps, Power Automate, and Splunk.
• Possess knowledge of security issues associated with cloud platforms such as Azure and AWS.
• Have strong security knowledge of operating systems (Windows, Mac, Linux) and browser security (Edge, Chrome).
• Show ability to learn new technologies and security features.
• Display excellent analytical, problem‑solving, and troubleshooting skills.
• Exhibit excellent organizational, interpersonal, communication, and customer service skills.
• Have knowledge of ITIL Service Management principles.
• Be willing to travel 1 week per quarter.

Benefits and Compensation

• Health, dental, and vision insurance.
• Life and disability insurance.
• Retirement & Savings Plan.
• Emergency backup child and adult care.
• Paid vacation, sick time off, and holidays.
• Professional development and career advancement opportunities.
• Employee recognition and reward programs.
• Employee wellness and assistance programs.
• Employee discounts and perks.

Salary range:Boston$103,700–$155,600;LosAngeles$111,500–$167,300;NewYork$111,500–$167,300;OrangeCounty$111,500–$167,300;Philadelphia$101,600–$152,500;SanDiego$111,500–$167,300;SanFrancisco$119,300–$178,900;SantaMonica$111,500–$167,300.

Position is eligible for overtime: No.