Paul Hastings LLP
Senior Security Engineer (Infrastructure/Network)
Paul Hastings LLP, Washington, District of Columbia, us, 20022
Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. With a strong presence throughout Asia, Europe, Latin America, and the U.S., we have the global reach and extensive capabilities to provide personalized service wherever our clients' needs take us. As one of the world's leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth.We have an opening for a Senior Security Engineer (Infrastructure/Network) in our Information Security Department.The Senior Security Engineer (Infrastructure/Network) will join the Information Security team and will be responsible for protecting system boundaries, keeping computer systems and network devices hardened against attacks, and securing highly sensitive data. Qualified candidates will have a background in cybersecurity or systems engineering.Responsibilities:
Provide guidance on how servers, infrastructure, and networking technologies are managed and hardened against security threats and vulnerabilities;Identify and implement ways to harden systems and reduce the attack surface;Secure enterprise information by determining security requirements; planning, implementing, and testing security systems; preparing security standards, policies, and procedures;Engineer, implement, and monitor security measures for the protection of computer systems, network, and information;Integrate security tasks and activities into system development methodologies (e.g. planning, design, implementation, operations, maintenance, and disposal);Identify and verify security requirements are met throughout the process;Work closely cross-functionally with IT and business teams in driving information security technology strategy;Apply security architecture principles through the system development lifecycle (SDLC);Consult on solution architecture for projects to ensure compliance with the security technical architecture;Prepare and document secure system development standard operating procedures and protocols;Drive and conduct system architectural reviews, secure design reviews, risk assessments and threat assessments;Perform vendor technical solution acceptance verification and validation;Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks;Assess gaps in existing policy and propose amendments to existing policy or new policy to address these gaps;Participate in the development and implementation of enterprise-level technical standards and procedural directives and other guidance materials;Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement;Participate in the development, implementation and review of security controls for the systems under their purview;Coordinate with system owners to resolve security issues through system lifecycle;Provide guidance and support to self-testing, security control assessment, preparation of remediation plans, and development of continuous monitoring plans.Qualifications:
12 years of experience in information technology or security engineering;BS degree in Computer Science or related field;Related certifications preferred;Proficiencies:
Strong communication skills with ability to articulate and translate security and risk management terminology in business terms;Familiarity with project management methodologies;Demonstrate integrity, accountability, respect and commitment to the Firm;Demonstrate excellence in managing all functions of the job;Apply the knowledge and skills required to perform at the highest level;Demonstrate best practices in professional relationships;Focus on job execution and achieving results.Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.The salary wage range that we expect to pay for this position is a minimum of $119,700 and a maximum of $173,600 annually. The actual pay wage may vary based on experience or other relevant factors.Eligible employees can participate in the Firm's comprehensive benefits program, which include the following:Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability;Flexible Spending Account and Health Savings Account;Healthcare Concierge and Advocacy;Voluntary 401k Plan and Profit Sharing;10 Paid Holidays per year and a generous PTO program;Family Support including Pediatric Mental Health and Parental Support, Paid Parental Leave, Fertility Benefits, and Breast Milk Shipping;Back-up Child Care, Elder Care, and Tutoring;Wellness Programs (Employee Assistance Program, Mental Health, and Well-Being Events);Retirement Plan Consulting;Anniversary Bonus Program;Professional Development Programs;Transportation Allowance and Commuter Benefits;International Travel Insurance;Auto/Home/Legal Insurance;Pet Insurance;Employee discounts;And more!The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women's Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives here.Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.
#J-18808-Ljbffr
Provide guidance on how servers, infrastructure, and networking technologies are managed and hardened against security threats and vulnerabilities;Identify and implement ways to harden systems and reduce the attack surface;Secure enterprise information by determining security requirements; planning, implementing, and testing security systems; preparing security standards, policies, and procedures;Engineer, implement, and monitor security measures for the protection of computer systems, network, and information;Integrate security tasks and activities into system development methodologies (e.g. planning, design, implementation, operations, maintenance, and disposal);Identify and verify security requirements are met throughout the process;Work closely cross-functionally with IT and business teams in driving information security technology strategy;Apply security architecture principles through the system development lifecycle (SDLC);Consult on solution architecture for projects to ensure compliance with the security technical architecture;Prepare and document secure system development standard operating procedures and protocols;Drive and conduct system architectural reviews, secure design reviews, risk assessments and threat assessments;Perform vendor technical solution acceptance verification and validation;Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks;Assess gaps in existing policy and propose amendments to existing policy or new policy to address these gaps;Participate in the development and implementation of enterprise-level technical standards and procedural directives and other guidance materials;Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement;Participate in the development, implementation and review of security controls for the systems under their purview;Coordinate with system owners to resolve security issues through system lifecycle;Provide guidance and support to self-testing, security control assessment, preparation of remediation plans, and development of continuous monitoring plans.Qualifications:
12 years of experience in information technology or security engineering;BS degree in Computer Science or related field;Related certifications preferred;Proficiencies:
Strong communication skills with ability to articulate and translate security and risk management terminology in business terms;Familiarity with project management methodologies;Demonstrate integrity, accountability, respect and commitment to the Firm;Demonstrate excellence in managing all functions of the job;Apply the knowledge and skills required to perform at the highest level;Demonstrate best practices in professional relationships;Focus on job execution and achieving results.Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.The salary wage range that we expect to pay for this position is a minimum of $119,700 and a maximum of $173,600 annually. The actual pay wage may vary based on experience or other relevant factors.Eligible employees can participate in the Firm's comprehensive benefits program, which include the following:Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability;Flexible Spending Account and Health Savings Account;Healthcare Concierge and Advocacy;Voluntary 401k Plan and Profit Sharing;10 Paid Holidays per year and a generous PTO program;Family Support including Pediatric Mental Health and Parental Support, Paid Parental Leave, Fertility Benefits, and Breast Milk Shipping;Back-up Child Care, Elder Care, and Tutoring;Wellness Programs (Employee Assistance Program, Mental Health, and Well-Being Events);Retirement Plan Consulting;Anniversary Bonus Program;Professional Development Programs;Transportation Allowance and Commuter Benefits;International Travel Insurance;Auto/Home/Legal Insurance;Pet Insurance;Employee discounts;And more!The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women's Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives here.Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.
#J-18808-Ljbffr