Security Engineer

Polsinelli; New York (NY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Paid time off

Medical insurance and benefits

Dental insurance

Vision insurance

Life insurance

Job summary

Polsinelli is hiring a Security Engineer to maintain and improve the security of our hybrid infrastructure, including on-premises and cloud environments. The role emphasizes developing security strategies, incident response, and collaboration with cross‑functional teams across the firm.

The ideal candidate has 2–4 years of security engineering experience, familiarity with CIS, MITRE ATT&CK, NIST CSF, and scripting in Python or PowerShell.

Qualifications

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with metrics, events, logging (Splunk or similar).
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

Responsibilities

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Skills

Security engineering

Penetration testing

Threat hunting

Python

PowerShell

Splunk

Education

Bachelor's degree in Computer Science/related field

Tools

Splunk

Job description

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli, What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Security Engineer for any of our offices, with the option to work remotely. However, our preference is for this role to be based in Kansas City.

Role Overview

Security Engineers are responsible for the secure operations of infrastructure, platforms, and software, including the installation, maintenance, and improvement of hybrid (on‑premise and cloud) computing environments. They also help develop new designs and security strategies across all applications, including infrastructure, platform, and SaaS.

Core Responsibilities

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade‑offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Employees approved for flexible work arrangements are expected to be available and maintain a practice of reliable, consistent attendance at all times during the employees scheduled work shift including, but not limited to, Teams/instant message, Zoom, email and voicemail, and by phone. Installation of Zoom on a personal cell phone is a requirement of the information security team. The Firm is nationwide but operates in the Central Time Zone.

Requirements

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with Metrics, Events, Logging, in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identify anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge/experience with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

The budgeted salary range for this position is $120,000 - $150,000.

As part of full‑time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long‑term disability benefits, short‑term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits.

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.