Security Engineer

Polsinelli•Washington, DC

About The Position

Polsinelli is hiring a Security Engineer for any of its offices, with the option to work remotely. The role is responsible for the secure operation, installation, maintenance, and improvement of infrastructure, platforms, and software in hybrid on-premises and cloud computing environments. It also contributes to security designs and strategies across infrastructure, platform, and SaaS applications. The Security Engineer helps configure secure business environments, identify and respond to threats and incidents, improve security technologies, develop automation, and support cybersecurity engineering and enterprise architecture. The role works with analysts and engineers across the organization to improve cyber resilience and ensure system designs balance security, operational requirements, and cost. The Firm operates in the Central Time Zone. Employees with approved flexible work arrangements must maintain reliable attendance and be available during their scheduled shift through communication channels including Teams/instant message, Zoom, email, voicemail, and phone. Installation of Zoom on a personal cell phone is required for the information security team.

Requirements

2–4 years of experience in on-premises environments focused on security.
2–4 years of experience in security engineering.
2–4 years of experience with Metrics, Events, Logging in an environment similar to Splunk.
Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or equivalent experience.
Experience with Microsoft Active Directory and Azure.
Ability to perform detection engineering by interrogating computer logs to identify anomalous behavior.
Ability to develop workflows within a SIEM to automate detections and actions.
Demonstrative knowledge or experience with scripting languages such as Python and PowerShell.
Demonstrative knowledge and expertise with common enterprise-grade security solutions.
Excellent verbal and written communication.

Responsibilities

Configure business operating environments securely using CIS best practices.
Perform penetration testing and threat hunting to identify potential risks.
Monitor for and respond to incidents in the Firm’s hybrid environment.
Keep infrastructure current, make recommendations, and continually improve security technologies.
Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
Work with analysts and engineers across the organization to continually improve cyber resilience.
Support development of system requirements and technical cybersecurity engineering solutions based on system architectures, including CIS Controls, the MITRE ATT&CK Framework, and the NIST Cyber Security Framework.
Support maturation of enterprise architecture to align with the Firm’s information security and risks to organizational operations, assets, and individuals.
Develop alternative system designs and architectures that consider trade-offs among security requirements, functional and operational requirements, and cost.
Identify and define requirements for overall network security.
Plan, engineer, and monitor implementation of network security systems.
Support configuration and implementation of network security tools.
Test systems and provide solutions for weaknesses, threats, and security issues.
Research and identify suitable technologies and processes to improve overall system security.
Regularly audit existing network configurations and provide recommendations for improvement.
Perform other duties as assigned.