Senior Enterprise Security and Monitoring Engineer

Greenberg Traurig•Austin, TX

14d•Hybrid

About The Position

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment. Join our Technology Team as a Senior Enterprise Security and Monitoring Engineer in one of our various offices. We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team. This role will be based in one of our various offices on a hybrid basis and reports to the Director of Enterprise Monitoring and Systems Management. Position Summary The Enterprise Security and Monitoring Engineer plays a critical role in designing, implementing, securing, and maintaining enterprise-level systems, applications, services, and cloud platforms, while proactively and reactively defending against security threats. The engineer will troubleshoot and resolve technical issues, investigate and mitigate security incidents, ensure the security of servers, applications, services, and data, maintain the integrity of the server environment with regular security updates and patches, and provide technical support and guidance to other IT staff and users. The engineer will also monitor the performance and availability of the IT infrastructure, identify and resolve issues, and generate reports. This role requires a strategic thinker with deep hands-on technical expertise in IT infrastructure, security operations, automation, and cloud security. This role also requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings.

Requirements

Strong analytical, critical thinking, and problem-solving skills. Ability to troubleshoot and resolve system, application, security and performance issues
Strong communication, interpersonal, and cross-functional collaboration skills
Ability to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiences
High degree of attention to detail and accuracy. Ability to document and maintain security and monitoring policies, procedures, and configurations
Ability to multitask efficiently yet prioritize and organize competing work demands
Demonstrated integrity and commitment to strict ethical standards in all professional dealings
Proven record of reliability and dependability. Candidate must be a self-starter and independent, yet function as an integral part of a team
Proven ability to work independently and collaboratively in a fast-paced, and security-conscious environment. Candidate must demonstrate a high degree of initiative and motivation
Ability to work flexible hours and be on-call.
Basic understanding of AI model infrastructure security
Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience
10+ years of professional experience managing medium to large enterprise Microsoft Windows environments, preferably in a law firm or similar environment
Strong working knowledge of cloud platforms like Microsoft Azure.
Strong knowledge and expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platforms
Strong background in security operations, endpoint security, and incident response
Hands-on experience managing a Privileged Access Management system
Strong knowledge of public key infrastructure (PKI) and cryptography
Hands-on experience with Azure/Entra ID cloud security, including, but not limited to conditional access, Defender for Endpoint, Defender for Cloud, and Defender for Identity
Proven expertise in Active Directory Domain Services and Entra ID management
Advanced understanding of authentication and authorization flows
Deep understanding of identity and access management and role-based access control concepts
Good working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePoint
Strong working knowledge with basic networking concepts, including TCP/IP, DNS, DHCP
Experience managing secure file transfer tools
Strong knowledge of single sign-on and multifactor authentication management
Experience working with WMI, Syslog and Performance Monitor.
Good working knowledge of SQL and SSRS and ability to write and optimize queries and reports
Solid understanding and familiarity with Linux and MacOS a huge plus
Strong working knowledge of Microsoft Graph PowerShell and Microsoft Graph API
Proficient in PowerShell scripting; experience with other scripting/programming languages (Python, Bash, etc.) is a plus
Solid understanding and experience with API programming (REST, JSON, authentication mechanisms) and security
Strong expertise with Microsoft operating systems (Windows Server 2012-2025 and Windows 11)

Nice To Haves

Microsoft certifications: Azure Security Engineer Associate and Identity and Access Administrator Associate, or equivalent are a big plus
Industry certifications: CEH, CISSP, or equivalent are a big plus

Responsibilities

Implements, manages, and optimizes enterprise security and monitoring tools and systems, such as antivirus, endpoint detection and response (EDR), identity threat detection and response (ITDR), and file integrity monitoring platforms
Implements, manages, and enhances privileged access management (PAM) systems
Monitors, detects, and responds to security threats, leading incident response efforts, from detection to resolution and post-incident reviews
Performs regular audits and assessments of server security and application, system, and data access controls, vulnerability management, and implements security best practices and recommendations, to ensure compliance with security policies and standards, and to protect the firm's data and assets
Plans and implements server and application security updates and patches to remediate vulnerabilities in collaboration with IT, compliance, and vulnerability management teams
Manages security measures, such as server, application, and unstructured file system access controls, to protect against unauthorized access, data loss, and other security threats against the firm’s on-prem infrastructure and cloud-based platforms
Monitors, supports, and troubleshoots servers, appliances, and applications
Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasks
Secures and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governance
Develops and maintains PowerShell scripts (or equivalent scripting languages) to automate administrative, security-related, and routine tasks
Leverages APIs for integration, automation, and enhancements of monitoring and management across systems and tools
Works cross-functionally with technology teams, including, but not limited to, information security, compliance, networking, and application teams
Proactively identifies opportunities for automation to improve system reliability and reduce manual effort
Researches and evaluates new security and monitoring technologies and solutions and recommends improvements and enhancements to the existing systems and processes
Stays updated with emerging trends and best practices in security and monitoring solutions, server and endpoint protection, identity protection and governance, data security, cloud security, and AI model infrastructure security