Security Engineer

McNees Wallace & Nurick LLC•Remote - PA, PA

8d•Remote

About The Position

McNees, Wallace & Nurick is actively seeking a Security Engineer to join our Information Technology department. At McNees, we believe our people are our greatest asset. We foster a culture of integrity, innovation, and collaboration - where your ideas matter, and your contributions make a real impact. You will lead the design, implementation, and continuous improvement of the firm's cybersecurity program. This is a high-impact role for a security professional who thrives on solving complex challenges, strengthening organizational resilience, and partnering across teams to embed security into every aspect of technology operations. Reporting to the Chief Information Officer, the Security Engineer will serve as the firm's primary security expert, driving security strategy, incident response, risk management, and security architecture initiatives while helping to advance the overall capabilities of our IT team.

Requirements

Bachelor's degree in Information Security, Information Technology, Information Systems, or a related field, or an equivalent combination of education and experience.
Five or more years of progressive experience in cybersecurity or information security, including responsibility for complex security programs and initiatives.
Strong knowledge of network security, operating system hardening, Azure security, and modern security architectures, including zero-trust principles.
Hands-on experience with SIEM platforms, vulnerability management tools, endpoint detection and response (EDR), firewalls, and IDS/IPS technologies.
Working knowledge of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, and SOC 2.
Understanding of identity and access management technologies and protocols, including SAML, OAuth, LDAP, and directory services.
Experience with scripting and automation tools such as PowerShell and Python.
Exceptional analytical, troubleshooting, and problem-solving abilities.
Strong written and verbal communication skills with the ability to present technical concepts to both technical and non-technical audiences.
Ability to manage multiple priorities, work independently, and maintain confidentiality in a professional services environment.

Nice To Haves

Industry certifications such as CISSP, CISM, CEH, GIAC, or CompTIA Security+ are strongly preferred.
Master's degree in Cybersecurity, Information Security, or a related discipline is preferred.

Responsibilities

Design, implement, and maintain enterprise security infrastructure, including firewalls, intrusion detection and prevention systems (IDS/IPS), endpoint protection platforms, SIEM solutions, and application control technologies.
Lead the execution of the firm's cybersecurity strategy and roadmap, aligning security initiatives with business objectives and risk management priorities.
Monitor security systems, investigate alerts, and coordinate responses to security incidents, including high-severity events and forensic investigations.
Conduct vulnerability assessments and penetration testing activities while partnering with system owners to remediate identified risks.
Develop, maintain, and enforce security policies, standards, and procedures aligned with industry frameworks such as NIST CSF, CIS Controls, and ISO 27001.
Manage identity and access management solutions, including multi-factor authentication, single sign-on, privileged access management, and periodic access reviews.
Support security and privacy compliance initiatives, audits, risk assessments, and third-party vendor security reviews.
Administer and optimize security tools, including email security gateways, web filtering solutions, and cloud security technologies.
Lead incident response, business continuity, disaster recovery, and major security-focused projects such as platform migrations and zero-trust initiatives.
Collaborate with infrastructure, cloud, and business teams to integrate security requirements into new and existing technologies and processes.
Advise firm leadership on cybersecurity risks, security architecture, and strategic technology investments.
Track emerging threats and security trends, and prepare metrics, dashboards, and reports demonstrating the firm's security posture and program maturity.
Mentor colleagues, share technical expertise, and help foster a culture of security awareness across the organization.