Information Security Engineer

McCarter & English is hiring an Information Security Engineer for a hands-on role supporting and maintaining the firm’s cybersecurity tools, systems, and daily security operations. This hybrid position is based in Newark, NJ and includes a staggered work schedule (generally 12:00 PM to 8:00 PM ET) to support threat detection, incident response, vulnerability management, and proactive threat intelligence activities.

Role Responsibilities

• Monitor and support daily security operations, including analysis, maintenance, and optimization of cybersecurity tools and infrastructure.
• Investigate, respond to, and document security incidents, including root cause analysis, corrective actions, and recommendations to strengthen security controls.
• Conduct proactive threat intelligence research focused on emerging threats, threat actors, and TTPs relevant to the firm and the legal industry.
• Perform threat hunting and analyze security telemetry across endpoint, network, identity, email, and cloud platforms to identify suspicious activity, indicators of compromise, and potential security exposures.
• Manage and contribute to cybersecurity projects, including security tool deployments, configuration enhancements, and remediation efforts.
• Support the vulnerability management program by identifying, prioritizing, and coordinating remediation of security vulnerabilities.
• Maintain and enhance security technologies, including SIEM, EDR, firewalls, identity protection, vulnerability management, and email security platforms.
• Collaborate with IT teams to implement security best practices, strengthen technical controls, and address identified security risks.
• Support security assessments, client security questionnaires, compliance initiatives, and audit-related remediation efforts.
• Contribute to security awareness initiatives in partnership with the Information Governance team.
• Coordinate with external security providers and incident response partners on investigations, escalations, and security initiatives.
• Develop and maintain security documentation, policies, procedures, and operational runbooks to improve security operations and incident response capabilities.
• Provide extended operational coverage through a staggered schedule to support monitoring, investigations, and incident response beyond traditional business hours.

Required Qualifications

• Bachelor’s degree in information systems, cybersecurity, or a related field, or equivalent experience.
• Minimum of 4 years of experience in information security, security engineering, security operations, or a related IT security role.
• CISSP or similar certification required; additional certifications such as CISM, GCIH, GCIA, GCFA, or other GIAC certifications are a plus.
• Hands-on experience with security technologies, including SIEM, EDR, vulnerability management, firewalls, identity protection, and email security platforms.
• Proven experience investigating security incidents, analyzing security events, and recommending response and remediation actions.
• Experience with threat intelligence research, threat hunting, and open-source intelligence (OSINT) techniques.
• Familiarity with MITRE ATT&CK, threat actor tactics, techniques, and procedures (TTPs), and common attack methodologies.
• Understanding of information security frameworks such as NIST CSF or ISO 27001, along with relevant regulatory and compliance requirements.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to work independently and manage multiple priorities.
• Effective written and verbal communication skills, including the ability to document investigations, communicate findings, and provide recommendations.
• Ability to collaborate effectively with internal teams and external security partners.
• Willingness to work a staggered schedule to provide extended security operations coverage through evening hours.

Technologies

• SIEM
• EDR
• Firewalls
• Identity protection
• Vulnerability management
• Email security platforms
• Endpoint, network, identity, email, cloud platforms
• MITRE ATT&CK
• TTPs
• OSINT
• NIST CSF
• ISO 27001

Reporting Line

Reports to the Director of Information Security, Data Privacy & Information Governance.

Schedule

Staggered work schedule, generally 12:00 PM to 8:00 PM ET, with flexibility based on operational needs.

Compensation

USD 120,000 - 150,000 per year.

Benefits

• Firm-paid Basic life and accidental death and dismemberment (AD&D) insurance
• Short-term (ST) and long-term (LT) disability benefits
• Comprehensive medical/prescription drug coverage (the Firm pays a share of the cost), including a high deductible health plan with an annual Firm health savings account (HSA) contribution
• Dental and vision coverage
• Supplemental health plans (accident, cancer and critical illness)
• Flexible spending accounts
• Optional life and AD&D insurance (supplemental employee, spouse and child)
• Supplemental STD coverage
• 401(k) plan offering three types of contributions: pre-tax, Roth and after-tax contributions
• Paid Time Off (PTO), paid holidays, and leaves of absence (e.g. parental leave)
• Free and confidential employee assistance program (EAP) and behavioral health services program
• Firm-paid back-up child/elder care, academic support and pet care program
• Tax-advantaged college savings 529 Plan
• Employee discounts through Working Advantage

Other Compensation

Eligibility for discretionary bonus.

Additional Notes

While the list of essential duties is intended to be as inclusive as possible, there may be other duties, which are essential to particular positions within the class.