IT Security Engineer II - Incident Responder

Orrick Herrington & Sutcliffe LLP•Any US Office, UNAVAILABLE

3d•Hybrid

About The Position

The IT Security Engineer II is a key member of Orrick’s security team, reporting to the Director of Threat Response Operations and collaborating daily with senior engineers. This position primarily focuses on security of the firm’s business operations and client information. The IT Security Engineer II exercises discretion and independent judgment in order to identify, investigate, and resolve security incidents, as well as to develop and refine security protocols that align with Orrick’s core values and client service standards.

Requirements

Three or more years of experience in the field of IT security.
Ability to interpret and follow incident response procedures in a fast-paced environment.
Knowledge of endpoint security, cloud security and networking protocols.
Experience with data analysis tools in support of incident investigation and reporting.
Strong analytic and communication skills.
Ability to advance goals independently and in collaboration with other team members or teams.
Demonstrated commitment to continuous learning and ability to evolve with new practices.

Nice To Haves

Associate or bachelor’s degree in technology or cybersecurity a plus.
Experience in the legal, financial, or business services industries a plus.
Industry certifications a plus(e.g., CompTIA Security+, CompTIA Network+, CCNA, Microsoft Certifications, CEH).

Responsibilities

Assess security alerts and investigate security incidents. Escalate high-risk findings.
Assess, configure, and troubleshoot intrusion detection tools and systems.
Assist in projects to deploy and configure new or enhanced security solutions.
Document IT security process, procedure, and incident findings.
Stay current with industry trends, emerging threats, evolving security tools. Use knowledge to recommend and help implement improvements to firm’s security posture.
Assist in maintaining up-to-date and secure baseline configurations for firm devices. Document current or future-state configurations and exceptions.
Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
As part of an on-call team, support end users and other IT staff with security-related matters.