Senior Security Engineer

Foley & Lardner LLP•Chicago, IL

39d•$104,400 - $172,300•Onsite

About The Position

Foley & Lardner LLP is seeking a Senior Security Engineer to join the Architecture team in its Information Security department. This role is responsible for engineering and implementing solutions to enhance the Firm’s security infrastructure, with a focus on cloud, AI, and agentic AI security. The Senior Security Engineer will collaborate closely with the Information Security team, internal IT, and business units to secure technology environments. Key responsibilities include establishing code review and security scanning processes for internally developed applications, implementing security controls for infrastructure and cloud platforms, and acting as an escalation resource for the Information Security Operations team. The role also involves providing security guidance, maturing the security control framework, developing tailored solutions, strengthening the overall security posture, and advising stakeholders on technology risk management and the safe adoption of new technologies.

Requirements

High School Diploma or equivalent required; Associate's Degree or Bachelor's Degree preferably in Engineering, Information Technology, Computer Science, or similar strongly preferred.
Minimum of five (5) years in a professional technical Information Technology role required.
Minimum of three (3) years of hands-on experience in Information Security with Cloud Security or AI/Agentic AI exposure required.

Nice To Haves

One or more of the following: CISSP, Microsoft Azure AZ-104 & AZ-500, CCSP, CCSK, CPT/CEH strongly preferred.
Certification(s) specializing in Cloud Security. or AI/Agentic AI Security strongly preferred.

Responsibilities

Work in active partnership with key stakeholders to perform security architecture risk reviews.
Develop and implement advanced-level Cloud and AI Security solutions.
Support and advance the overall Information Security technology roadmap.
Provide recommendations for advancing the Information Security program, security policies, and security control standards to enhance operational practices.
Create and maintain Information Security standards applicable to all technologies in the portfolio.
Provide requirements, guidance, and vision to the vendor community to cultivate the appropriate combination of technology and feature capabilities to meet current and future security requirements.
Execute on infrastructure threat and vulnerability management processes.
Ensure security systems are upgraded by monitoring security environment, identifying security gaps and evaluating and implementing enhancements.
Define, develop and maintain metrics and measurements for information security controls and processes.
Respond to security-related issues, problems, crises, and critical situations to support resolution and minimize downtime.
Acts as a senior-level point of contact for incident investigations and minor security events (e.g., unauthorized access, non-compliance with Firm policies, fraud, service disruptions, etc.) to determine malfunctions, breaches, and remediation steps.
Responsible for Information Security technology selection process to include requirements consolidation into RFI/RFP/RFQ, testing, POC, selection and deployment.
Support audits against internal and industry process, quality, and security standards; drive initiatives and remediation efforts to correct non-conformance.
Provide Information Security consulting on security related issues.
Collaborate with peers to identify and implement improvement initiatives across the Firm, processes and toolsets.
Manage multiple, parallel projects using formal project planning techniques.
Ability to work evening and weekend hours as needed or directed.
Some travel may be required.