Senior Information Security Engineer

Please note that Jackson Walker is not currently accepting search firm submissions in connection with this opening.

Senior Information Security Engineer

FLSA Status: Exempt

Department: IT

Reports to: Director of Information Security

POSITION SUMMARY

The Senior Information Security Engineer is responsible for maintaining the security and integrity of the Firm’s data, hardware, software and people. Their primary responsibility is to manage the information security systems and processes of the Firm and respond to any alerts and warnings generated by those systems including: verifying and responding to incidents, containing and remediating confirmed incident, and recovery following an incident. The Senior Security Engineer will work with the Director of Information Security as well as the various IT teams in communicating and remediating flaws in security systems.

SPECIFIC DUTIES

• Manage and enhance Jackson Walker’s Information Security infrastructure and critical security operational processes including:

Microsoft M365/Azure security tools/processes including:

• Defender for O365
• Defender for Identity
• Defender for Cloud
• Sentinel (SIEM) and KQL queries
• Conditional Access Policies

Palo Alto Networks Next-Gen Firewalls and GlobalProtect VPN

• Monitor Jackson Walker’s computing environment by performing security event analysis to detect activities including but not limited to: policy violations, abnormal behaviors, network intrusions, best practice recommendations, etc.
• Assist in execution and fulfillment of Jackson Walker vulnerability management and penetration testing processes and assessments.
• Participate in security audits, client risk assessments, risk analyses and security reviews.
• Take quick corrective actions on identified threats, identify root causes, and put measures in place to prevent repeat occurrences.
• Crafting, revising and documenting Information Security standards, procedures, security checklists, operational playbooks, cyber newsletters, etc.
• Work with vendors, partners and consultants to identify security technology advancements and help determine the viability of those advancements to the Firm.
• Evaluates, and recommends, new security technologies, processes, and procedures for applicability to the Firm’s security business needs.
• Provides advice, documentation and training to Firm personnel on information security technologies.
• Leads the Firm’s patching process to ensure that the Firm maintains the most up-to-date operating system development activities including webinars, seminars,