Lead Security Engineer

Practising Law Institute • New York, NY

89d • $140,000 - $175,000

About The Position

Practising Law Institute (PLI) educates and informs lawyers and other professionals with innovative programs, publications, podcasts, and additional resources. With a sterling reputation developed over 90 years, PLI is a trusted source of professional development and knowledge for the legal community. A nonprofit organization, PLI is also known for its dedication to providing pro bono training and resources to ensure access to justice. PLI’s client base includes a large array of prestigious law firms, corporations, and government agencies. We are also proud to have recently been named one of the “Brands That Matter” by Fast Company. More information about PLI may be found on our website www.pli.edu. PLI is searching for a technology professional to fill the role of Lead Security Engineer. Work in a collaborative environment with a diverse, employee community where staff enjoy a generous benefits package and a genuine commitment to a work-life balance (4+ weeks of paid time off and hybrid remote/in-person schedules for most roles). The Lead Security Engineer is responsible for overseeing enterprise security initiatives. At PLI, this position applies shift-left security methodologies, adheres to industry best practices, and utilizes agile frameworks to protect both cloud and hybrid environments. As a key member of the Computer Security Incident Response Team (CSIRT), the Lead Security Engineer coordinates incident response activities in collaboration with internal stakeholders and external vendors. The role encompasses perimeter defense, DevSecOps integration, management of application security tools, identity management, and network and cloud security. Direct hands-on experience is essential, and the position reports directly to the Head of Site Reliability Engineering.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related discipline, or equivalent practical experience.
• 5-8 years of experience in IT security, emphasizing vulnerability management, identity governance, networking, and application security within regulated sectors.
• Proficiency with key vulnerability management platforms (Tanium, Tenable), IAM tools (Okta, Azure AD), and perimeter protection technologies (WAF, CDN, firewalls).
• Extensive hands-on expertise integrating application security solutions (Veracode, Snyk) in agile DevSecOps environments.
• Demonstrated ability in designing secure cloud architectures on AWS, Azure, and GCP, with a strong grasp of network segmentation and infrastructure as code.
• Experience with industry standards and frameworks, including ISO 27001, NIST, PCI DSS, and SOC 2.
• Proven track record of making security and operational impacts through KPIs.
• Professional certifications such as CISSP, CISM, CIAM, CCSP, or equivalent credentials.
• Experience deploying zero-trust models and privileged access management systems.
• Background in network security architecture, including VPNs, firewalls, IDS/IPS, and threat intelligence integration.
• Success in promoting shift-left security and embedding it within agile SDLC processes.
• Excellent communication and mentoring abilities, with skill in translating technical risks to actionable items for stakeholders.

Responsibilities

• Partner with technology team on Security design and implementation.
• Architect, deploy, and supervise perimeter protection measures such as web application firewalls (WAF), cloud-based next-generation firewalls, and CDN configurations to mitigate network and application threats.
• Formulate and maintain robust identity and access management (IAM) strategies, incorporating zero-trust architecture, comprehensive identity governance, and privileged access management protocols to secure all infrastructure and applications.
• Direct application security initiatives by integrating static and dynamic code analysis tools (e.g., Veracode, Snyk) into CI/CD pipelines to facilitate early-stage security.
• Oversee the entire vulnerability management lifecycle, including discovery, prioritization, risk assessment, and remediation tracking via automated solutions and manual processes.
• Lead CIRT operations, facilitating swift incident detection and resolution through SIEM solutions and threat intelligence platforms, supported by comprehensive playbooks and KPIs.
• Collaborate with DevSecOps and SRE teams to ensure alignment of security controls with DevOps practices and secure infrastructure-as-code workflows (Terraform, Ansible).
• Security Posture for cloud and hybrid environments across AWS, Azure, and GCP, ensuring robust segmentation, secure communication, and regulatory compliance.
• Provide mentorship and guidance to security and engineering teams concerning best practices for vulnerability management, identity controls, network security, and application security.
• Other duties as assigned.

Benefits

• Medical, dental and vision plans for employees and their families
• Generous employer contribution to employee retirement savings account
• Ample paid time off and holidays, summer Fridays
• Flexible hybrid remote/in-person scheduling for most roles
• Unlimited access to LinkedIn Learning web-based training along with other career development opportunities
• Work-life balance initiatives
• One-time $500 Home Office Allowance
• Gym/Wellness Allowance of up to $300 each calendar year

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 501-1,000 employees