IT Security Engineer

The IT Security Engineer serves as the firm’s primary technical defender and security subject matter expert, combining hands-on security operations with security engineering to protect highly confidential client data. The role supports compliance with Outside Counsel Guidelines (OCGs) and prepares for regulatory audits through ongoing security controls and assessments.

Key Responsibilities

• Design, deploy, and manage the firm’s security stack, including firewalls, Email Security gateways, and SIEM/log management platforms.
• Coordinate with vendors to configure and deploy EDR and network IDS/IPS sensors.
• Administer identity governance using MFA, SSO, and Conditional Access, along with Mobile Device Management (MDM) policies for attorneys accessing client data remotely.
• Implement and audit security barriers inside Document Management Systems (DMS) to help prevent internal conflicts of interest and unauthorized file access.
• Monitor automated alerts, investigate vulnerabilities and potential compromises, and provide technical leadership during security incident response and containment activities.
• Run regular internal vulnerability scans and remediate weaknesses across endpoints and servers.
• Partner with IT leadership to respond to corporate security questionnaires, aligning practices with standards such as CIS and NIST.
• Assess the security posture of third-party software and vendors supporting eDiscovery, litigation support, and accounting.

Required Qualifications

• 3 to 5+ years of dedicated information security engineering experience.
• Prior experience in a professional services environment (law firm, accounting, finance) is highly preferred.

Technical Competencies

• Advanced experience with the Microsoft 365 Security Suite, including Defender, Intune, Entra ID, and Purview.
• Hands-on proficiency with modern enterprise security platforms such as CrowdStrike, SentinelOne, and Cisco.
• Working knowledge of secure file transfer protocols, data encryption standards, and remote access protocols including VPN and ZTNA.
• Familiarity securing legal technologies, including Document Management Systems (iManage, NetDocuments) or eDiscovery tools (Relativity).
• Ability to work independently, manage multiple security tools at once, and shift quickly between daily operations and security engineering work.
• Exceptional discretion with confidential data and the ability to communicate technical risks clearly to attorneys, partners, and clients.

Technologies and Tools

Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview), CrowdStrike, SentinelOne, Cisco, MFA, SSO, Conditional Access, MDM, Document Management Systems (DMS), iManage, NetDocuments, eDiscovery tools (Relativity), firewalls, Email Security gateways, SIEM, EDR, network IDS/IPS sensors, secure file transfer protocols, data encryption standards, VPN, ZTNA, CIS, NIST, Outside Counsel Guidelines (OCGs), and SIEM/log management platforms.

Preferred Certifications

• CISSP
• CompTIA Security+ (Sec+) or Cybersecurity Analyst (CySA+)
• Microsoft Certified: Azure/M365 Security Engineer Associate
• GIAC Security Essentials (GSEC)

Location, Schedule, and Compensation

• Location: Iselin, NJ (onsite)
• Schedule: Full-time, five days per week onsite
• Compensation: USD 125,000 - 135,000 per year
• Work arrangement: Remote or hybrid work is not part of the regular work arrangement.

Benefits

• Competitive salary and comprehensive benefits package
• Five-day-per-week onsite position

How to Apply

Submit a resume and a brief summary of relevant experience to [email protected] with ISENJ in the subject line. Employment is contingent upon successful completion of a standard background screening.