System Engineer - Security

Bowman and Brooke•Minneapolis, MN

4h•Hybrid

About The Position

Systems Engineer - Security is responsible for implementing, operating, and maintaining the firm’s information security technologies and controls in support of the overall security strategy established by the Manager – IT Security. This role focuses on the hands-on execution of security operations, monitoring, investigations, and system hardening to protect the firm’s systems, data, and client information in a highly regulated legal environment. This is a hybrid position that will require semi-regular attendance at our Downtown Minneapolis, MN location.

Requirements

5+ years of experience in IT security engineering.
Expertise in regulatory requirements and frameworks, such as HIPAA, NIST, and SOC 2.
Strong knowledge of IT infrastructure, network security, and data protection principles.
Hands-on experience with security tools (e.g., firewalls, IDS/IPS, endpoint security) and technologies (e.g., Active Directory, Microsoft 365, Azure AD).
Proven ability to lead incident response efforts, including threat detection, analysis, and remediation.
Strong problem-solving skills, with the ability to handle complex security challenges.
Ability to communicate complex technical security concepts to both technical and non-technical stakeholders, including senior management.
3 years of Information Security, Network Security, or Cyber Security.
Hands-on experience with Microsoft Azure (M365/O365)
Strong understanding of identity and access management (IAM).

Nice To Haves

4-year degree in Computer Science, Information Technology, or a related field is desirable.
Experience in the legal industry or with law firm clients is highly desirable.
Certifications such as CISSP, CISM, or CRISC are preferred.

Responsibilities

Develops and maintains daily security monitoring to ensure the integrity, availability, and effectiveness of security systems and processes, including log and system data analysis.
Leads and supports identity and access management (IAM) solutions, including user lifecycle management, access controls, authentication mechanisms, and enforcement of least-privilege access across on-premises and cloud environments.
Monitors, investigates, and responds to security incidents, phishing attempts and cyberattacks, contributing to forensic analysis to identify vulnerabilities and prevent recurrence.
Assesses security infrastructure and recommends, plans, and executes upgrades and new security solution deployments to improve performance and resilience.
Collaborates across the firm to embed security into systems, processes, and cloud initiatives, safeguarding digital assets.
Configures, maintains, and upgrades security software to operate effectively within the broader IT and cloud environments.
Designs, implements, and maintains information security protocols to protect electronic data and systems from unauthorized access.
Produces performance, capacity, and licensing reports to support forecasting and utilization planning.
Maintains comprehensive documentation for security systems, configurations, applications, and licensing.