Security Engineer

Polsinelli•Edwardsville, IL

5h•$100,000 - $150,000

About The Position

Polsinelli is hiring a Security Engineer for any of its offices, with the option to work remotely. Security Engineers are responsible for the secure operations of infrastructure, platforms, and software, including the installation, maintenance, and improvement of hybrid on-premises and cloud computing environments. They help develop new designs and security strategies across applications, including infrastructure, platform, and SaaS. Employees approved for flexible work arrangements are expected to maintain reliable, consistent availability during their scheduled work shifts, including through Teams/instant message, Zoom, email, voicemail, and phone. Installing Zoom on a personal cell phone is required for the information security team. The Firm operates in the Central Time Zone.

Requirements

2–4 years of experience in on-premises environments focused on security.
2–4 years of experience in security engineering.
2–4 years of experience with Metrics, Events, and Logging in an environment similar to Splunk.
Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or equivalent experience.
Experience with Microsoft Active Directory and Azure.
Ability to perform detection engineering by interrogating computer logs to identify anomalous behavior.
Ability to develop workflows within a SIEM to automate detections and actions.
Knowledge or experience with scripting languages such as Python and PowerShell.
Knowledge and expertise with common enterprise-grade security solutions.
Excellent verbal and written communication.

Responsibilities

Configure business operating environments securely using CIS best practices.
Perform penetration testing and threat hunting to identify potential risks.
Monitor for and respond to incidents in the Firm’s hybrid environment.
Keep infrastructure current, make recommendations, and continually improve security technologies.
Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
Work with analysts and engineers across the organization to improve cyber resilience.
Support development of system requirements and technical cybersecurity engineering solutions based on system architectures, CIS Controls, the MITRE ATT&CK Framework, and the NIST Cyber Security Framework.
Support the maturation of enterprise architecture to align with the Firm’s information security and risks to organizational operations, assets, and individuals.
Develop alternative system designs or architectures that consider trade-offs among security, functional and operational requirements, and cost.
Identify and define overall network security requirements.
Plan, engineer, and monitor implementation of network security systems.
Support configuration and implementation of network security tools.
Test for system weaknesses, threats, and security issues, and provide solutions.
Research and identify technologies and processes that can improve overall system security.
Regularly audit existing network configurations and recommend improvements.
Perform other duties as assigned.