Go back to results

Security Engineer (DLP)

Location: United States
Type: Full Time
  • Location: Illinois, US
  • Remote role

 

*** LARGEST LAW FIRM GLOBALLY BY HEADCOUNT + REVENUE ***

The Security Engineer develops, implements, and provides 3rd-level support for the Firm’s information technology infrastructure. The engineer will assist in the creation, implementation, and ongoing management (including forensics) of security-related systems. The position’s primary focus is the protection of data, systems, and facilities to ensure the protection, confidentiality, and integrity of the Firm in compliance with organizational policies and standards. The Senior Security Engineer will also provide input into the development of security awareness and training initiatives.

 

Key responsibilities of this position include:

The position is responsible for 3rd-level support and engineering of the Firm’s security systems. Individual is expected to critically analyze processes and procedures and suggest improvements. Some interfacing with internal customers and technical groups should be expected. Travels occasionally to provide information security services and engage in audits/assessment/forensics. Additional responsibilities include:

  • Architect, implement, and support solutions identified as necessary for the protection of Firm assets.
  • Provide input, create documentation, and review information security policies and procedures.
  • Utilize common security toolset (SIEM, sniffer, IDS, vulnerability scanner, etc., to identify issues and analyze compliance with existing policies and procedures.
  • Provide reports to the Information Security Manager.
  • Maintain the Firm’s security-related information repositories (web, database, SharePoint)
  • Monitor and report on compliance with the Firm’s information security policies and procedures.
  • Monitor internal control systems to ensure that appropriate information access levels and security clearances are maintained.
  • Perform formal/informal security risk assessments by leveraging knowledge gained via daily analysis and review.
  • Report compliance failures to appropriate management for immediate remediation.
  • Participate in the definition of the organization’s IT disaster recovery and continuity plans for information systems.
  • Serve as an internal information security consultant to the Security Team by monitoring information security technologies and trends.
  • Serve as a 3rd-level support resource for the purposes of ticket resolution and change management activities.
  • Analyze, recommend, and implement controls as determined necessary by the Security Manager.
  • Support standard Firm desktop & notebook as well as server based hardware and software related to security applications and utilities. Utilizes remote control and remote access software in the performance of her/his duties.
  • Utilize standard security tools such as a SIEM, endpoint/network protection technologies, DLP, two factor, vulnerability scanners, custom scripts, and packet analyzer.
  • Capable of moving 40 pounds of material or equipment without assistance as required.

 

Knowledge and Skills:

  • Thorough understanding of security concepts and best practices.
  • Proficient in the use of Microsoft Excel, Access, Word.
  • Experience with Wide Area and Local Area Networks.
  • Authoritative understanding of data communications and information systems hardware and software.
  • Authoritative understanding of principles, theories, techniques, and methods of information system analysis and programming, particularly secure coding practices.
  • Thorough knowledge of data processing and data communications concepts and services.
  • Thorough knowledge of computer monitoring systems, vendor-supplied packaged programs, macros, utilities, and other highly technical programs.
  • Ability to gather and analyze facts, draw conclusions, define problems, and suggest solutions.
  • Ability to adapt, integrate, and modify existing programs or vendor-supplied package programs for use with existing information systems.
  • Capable of providing assistance with the preparation of training and informational sessions.
  • Proficiency in oral and written English.
  • Ability to be productive and maintain focus without direct supervision