Senior Cyber Security Engineer

Cooley LLP; Reston (VA); On-site; USD 145,000 - 210,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Paid time off 21 days

10 holidays

Parental leave

Firm-paid life insurance

LTD & AD&D

Job summary

Cooley LLP is seeking a Senior Cyber Security Engineer to join the Security team in Reston, VA. The role focuses on maintaining security practices, implementing security systems, and supporting the Firm's security posture.

The candidate will work on monitoring, configuring, and supporting security tools and participate in incident response under guidance from management. Required are 5+ years of information security experience, strong knowledge of AD, firewalls, EDR, SIEM, and cloud services;

Qualifications

• 5+ years of information security experience with ability to operate at elevated scope and autonomy.
• Proven practical information security knowledge and broad technology understanding.
• Experience with Active Directory, firewalls, IDS/IPS, EDR, IAM, SIEM, DLP and cloud services.

Responsibilities

• Review, analyze and monitor security system reports and logs for suspicious activities and trends.
• Configure, maintain and administer security products and solutions.
• Manage firewalls, VPN, PAM, DLP, EDR, and SIEM systems.
• Participate in Incident Response to address alerts and incidents.
• Conduct risk and security reviews on products as directed by management.
• Monitor security metrics including logs and network monitoring systems.
• Respond to audits and vendor evaluations.
• Collaborate on security projects and technology initiatives.

Skills

5+ years information security

Active Directory

Firewalls

IDS/IPS

EDR

SIEM

Web filters & proxies

Encryption (data at rest & in transit)

Vulnerability scanners

Data Loss Prevention (DLP)

Privileged access management (PAM)

Cloud services (AWS/Azure)

On-call rotation (24/7)

Microsoft Office and iManage

Education

Bachelor's Degree in Information Technology or related field

CISSP or equivalent certifications

Tools

Palo Alto Firewalls

Prisma Access

Tenable Vulnerability Scanner

VMware

Cyberhaven DLP

Proofpoint Email Gateway

Forensic tools

S/MIME encryption

Delina Secret Server

CrowdStrike

Google SecOps SIEM

Patch management systems

Job description

Senior Cyber Security Engineer

Cooley is seeking a Senior Cyber Security Engineer to join the Security team.

Position summary

Cooley Technology embraces a culture of customer service excellence and all members of the department are expected to move this agenda forward. To that end, the Cyber Security Engineer is expected to recognize that the Cooley Technology department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined later in this document. The Cyber Security Engineer will work to maintain and monitor the security practices and systems implemented by the Firm. The Cyber Security Engineer will implement and manage security systems and tools as directed by Firm policies, procedures, and management. Specific duties include, but are not limited to, the following:

Position responsibilities

• Review, analyze and monitor security system reports and logs for suspicious activities, trends and patterns. This includes but is not limited to web filters, mail gateways, firewalls, encryption systems, anti-malware systems, IDS/IPS
• Configure, maintain, and administer security products and solutions used within the Firm
• Configure, maintain and administer firewalls, VPN, privileged access management (PAM), data loss prevention, EDR, and security information event monitoring (SIEM) systems
• As a member of the Incident Response team respond to alerts, warnings, incidents, and help desk tickets to ensure minimum exposure of Firm assets under the direction of the Cyber Security Manager
• Participate in troubleshooting efforts on all cyber security related problems to include the establishment, management, and use of TAM arrangements with specified security vendors
• Participate as a technician/engineer on Technology and Innovation projects
• Conduct risk and security reviews on products as directed by the Cyber Security Manager or Technology management
• Recommend controls to ensure the appropriate level of protection and adherence to the goals of the overall information security strategy
• Monitor Technology security metrics and measures to include monitoring security system logs, Windows server logs, and network monitoring systems
• Provide consultation and conduct internal investigations that may require forensic analysis under the direction of the Cyber Security Manager and/or Technology management
• Respond to audit findings as directed by the Cyber Security Manager and/or Technology Management
• Evaluate and recommend commercial security vendors and products
• All other duties as assigned or required

Skills and experience

Required:

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 5+ years of experience in information security with the proven ability to operate at an elevated level in terms of scope of responsibility, judgement and autonomy.
• Proven practical experience in information security and well‑rounded knowledge of Technology
• Experience working with:
• Active Directory
• Firewalls
• Intrusion Detection and Prevention Systems
• Endpoint Detection and Response (EDR) and management console
• Web filter/proxy technologies
• Encryption technologies - whole disk, e‑mail, and data at rest
• Vulnerability scanners
• Data loss prevention
• Email gateways and anti‑spam services
• Privileged account management systems
• Security information and event management systems
• AWS and Azure Cloud Services
• Required to participate in a 7x24 on‑call rotation

Preferred:

• Bachelor's Degree in Information Technology or Computer Information Systems
• CISSP or equivalent certifications and/or experience
• Experience working with the following products:
• Palo Alto Network's Firewalls and Prisma Access
• Tenable Vulnerability Scanner
• VMWare
• Cyberhaven Data Loss Prevention
• Proofpoint Email Gateway and Anti‑Spam
• Forensic Tools
• S/MIME email encryption
• Delina Secret Server
• Crowdstrike
• Google SecOps SIEM
• Two factor authentication technologies
• Penetration testing tools
• Patch management systems

Competencies

• Exceptional customer service skills
• Excellent analytical, problem‑solving, customer service, project management and communication skills
• Goal‑oriented
• Excellent decision making, integrity and working with IT management, business users and staff
• Excellent oral and written communication skills, including technical and user documentation
• Strong organizational skills
• Ability to work independently and under high pressure with tight schedules and deadlines
• Ability to interact well with all levels of business professionals
• Excellent active listening skills
• Flexible and patient with process development/execution and adherence to instruct project management practices
• Capable of grasping new concepts quickly and without prior experience
• Detail‑oriented
• Ability to multi‑task and work in fast‑paced environment
• Ability to interact and coordinate with several teams to achieve objectives
• Ability to solve problems independently and simultaneously, effectively managing multiple tasks
• Professional demeanor at all times

Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE.

The expected annual pay range for this position with a full‑time schedule is $145,000 - $210,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate.

We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre‑tax commuter benefits, life insurance, AD&D, long‑term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm‑paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.