Security Engineer

Polsinelli; Washington (District of Columbia); À distance; USD 100 000 - 150 000; Plein temps

Résumé du poste

Polsinelli PC seeks a Security Engineer to oversee secure operations of hybrid infrastructure, including on-prem and cloud, and to develop security designs across applications and SaaS. You will implement CIS controls and monitor threats in a nationwide, largely remote team.

The role requires 2–4 years in security engineering, experience with SIEM tools, and scripting in Python or PowerShell, plus strong communication skills to collaborate across the firm\'s engineering and security groups.

Qualifications

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with Metrics, Events, Logging, in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identity anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge/experience with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

Responsabilités

• Configure security environments using CIS best practices.
• Perform penetration testing and threat hunting to identify risks.
• Monitor for incidents in the Firm’s hybrid environment.
• Keep infrastructure current and improve security technologies.
• Analyze and develop programs, scripts, and automation for security.
• Collaborate with analysts and engineers to improve cyber resilience.
• Support maturation of enterprise architecture alignment with information security and risks.

Connaissances

Security engineering

Detection engineering

Python

PowerShell

Communication

Azure AD

Formation

Bachelor's degree (CS/CE/IS or equivalent)

Outils

Splunk

SIEM

Active Directory

Description du poste

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli,What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Security Engineer for any of our offices, with the option to work remotely.

ROLE OVERVIEW

Security Engineers are responsible for the secure operations of infrastructure, platforms, and software, including the installation, maintenance, and improvement of hybrid (on-premise and cloud) computing environments. They also help develop new designs and security strategies across all applications, including infrastructure, platform, and SaaS.

CORE RESPONSIBILITIES

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Employees approved for flexible work arrangements are expected to be available and maintain a practice of reliable, consistent attendance at all times during the employees scheduled work shift including, but not limited to, Teams/instant message, Zoom, email and voicemail, and by phone. Installation of Zoom on a personal cell phone is a requirement of the information security team. The Firm is nationwide but operates in the Central Time Zone.

REQUIREMENTS

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with Metrics, Events, Logging, in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identity anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge/experience with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

The budgeted salary range for this position is $100,000 - $150,000.

As part of full-time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long-term disability benefits, short-term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits.

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.

Behaviors

Preferred

Team Player : Works well as a member of a group

Loyal : Shows firm and constant support to a cause

Detail Oriented : Capable of carrying out a given task with all details necessary to get the task done well

Dedicated : Devoted to a task or purpose with loyalty or integrity

Motivations

Preferred

Flexibility : Inspired to perform well when granted the ability to set your own schedule and goals

Ability to Make an Impact : Inspired to perform well by the ability to contribute to the success of a project or the organization

Education

Required

Bachelor's or better in Information Technology.

Experience

Preferred

2-4 years: Experience in security engineering

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.