Security Engineer

Polsinelli; Clayton (MO); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D insurance

Long-term disability

Short-term disability

Parking/Transit reimbursement

401(k) benefits

Employee assistance

Job summary

Polsinelli is hiring a Security Engineer responsible for secure operations of hybrid environments (on‑prem and cloud) across infrastructure, platforms, and software. You will implement security designs, run penetration tests, and help mature threat strategies in collaboration with analysts and engineers.

Ideal candidates have 2–4 years in on‑prem/systems security, SIEM workflows, Python or PowerShell, and a Bachelor’s degree.

Qualifications

• 2–4 years of experience in on-premises environments focused on security.
• 2–4 years of experience in security engineering.
• 2–4 years of experience with Metrics, Events, Logging in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identify anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

Responsibilities

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on CIS, MITRE ATT&CK, and NIST CSF.
• Support the maturation of the enterprise architecture to align with information security and risks.
• Develop alternatives of system designs considering security vs. cost and performance.
• Identify and define requirements of overall network security.
• Plan, engineer, and monitor security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify technologies to improve overall security.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Skills

Security engineering

On-prem security

Metrics & Logging

Python

PowerShell

SIEM workflows

Active Directory with Azure

Detection engineering

Threat hunting

Communication

Education

Bachelor’s degree in Computer Science or related

Job description

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli, What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Security Engineer for any of our offices, with the option to work remotely. However, our preference is for this role to be based in Kansas City.

Role Overview

Security Engineers are responsible for the secure operations of infrastructure, platforms, and software, including the installation, maintenance, and improvement of hybrid (on‑premise and cloud) computing environments. They also help develop new designs and security strategies across all applications, including infrastructure, platform, and SaaS.

Core Responsibilities

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade‑offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Employees approved for flexible work arrangements are expected to be available and maintain a practice of reliable, consistent attendance at all times during the employees scheduled work shift including, but not limited to, Teams/instant message, Zoom, email and voicemail, and by phone. Installation of Zoom on a personal cell phone is a requirement of the information security team. The Firm is nationwide but operates in the Central Time Zone.

Requirements

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with Metrics, Events, Logging, in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identify anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge/experience with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

The budgeted salary range for this position is $120,000 - $150,000.

As part of full‑time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long‑term disability benefits, short‑term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits.

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.