Security Engineer

🕒 il y a 1 jour

🔔 Pennsylvania – Distant

🔔 Pennsylvania – Remote

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

McNees Wallace & Nurick

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 1935

⚖️ Juridique

Legal

McNees Wallace & Nurick est un cabinet d'avocats basé en Pennsylvanie qui offre des services juridiques dans plusieurs domaines de pratique et sert des clients, y compris des entités du secteur public et privé. Le site web du cabinet met en avant ses pratiques, les actualités et portraits d'avocats, les formations continues et événements (par exemple, le symposium des avocats scolaires), ainsi que des blogs thématiques traitant du droit du travail et de l'emploi, de l'utilisation des sols, de la fiscalité étatique et locale de Pennsylvanie, et des affaires du secteur public. McNees mentionne également les distinctions du cabinet, telles que sa nomination parmi les cabinets d'avocats à la croissance la plus rapide de Pennsylvanie et sa présence répétée dans le classement des meilleurs lieux de travail en Pennsylvanie.

Description

• Lead the design, implementation, and continuous improvement of the firm's cybersecurity program • Design, implement, and maintain enterprise security infrastructure, including firewalls, IDS/IPS, endpoint protection platforms, SIEM solutions, and application control technologies • Lead the firm's cybersecurity strategy and roadmap, aligning initiatives with business objectives and risk priorities • Monitor security systems, investigate alerts, and coordinate responses to security incidents and forensic investigations • Conduct vulnerability assessments and penetration testing and partner with system owners to remediate risks • Develop, maintain, and enforce security policies, standards, and procedures aligned with NIST CSF, CIS Controls, and ISO 27001 • Manage identity and access management solutions, including MFA, SSO, privileged access management, and access reviews • Support security and privacy compliance initiatives, audits, risk assessments, and third-party vendor security reviews • Administer and optimize email security gateways, web filtering solutions, and cloud security technologies • Lead incident response, business continuity, disaster recovery, platform migrations, and zero-trust initiatives • Collaborate with infrastructure, cloud, and business teams to integrate security requirements into technologies and processes • Advise firm leadership on cybersecurity risks, security architecture, and strategic technology investments • Track emerging threats and prepare metrics, dashboards, and reports on security posture and program maturity • Mentor colleagues and foster organization-wide security awareness • Report to the Chief Information Officer

🎯 Exigences

• Bachelor's degree in Information Security, Information Technology, Information Systems, or a related field, or equivalent combination of education and experience • Five or more years of progressive cybersecurity or information security experience, including responsibility for complex security programs and initiatives • Strong knowledge of network security, operating system hardening, Azure security, and modern security architectures, including zero-trust principles • Hands-on experience with SIEM platforms, vulnerability management tools, EDR, firewalls, and IDS/IPS technologies • Working knowledge of NIST CSF, CIS Controls, ISO 27001, and SOC 2 • Understanding of identity and access management technologies and protocols, including SAML, OAuth, LDAP, and directory services • Experience with PowerShell and Python scripting and automation • Exceptional analytical, troubleshooting, and problem-solving abilities • Strong written and verbal communication skills, with ability to present technical concepts to technical and non-technical audiences • Ability to manage multiple priorities, work independently, and maintain confidentiality in a professional services environment • CISSP, CISM, CEH, GIAC, or CompTIA Security+ certifications strongly preferred • Master's degree in Cybersecurity, Information Security, or related discipline preferred

🏖️ Avantages

• Mentorship, leadership development, and continuous learning opportunities • Flexible work arrangements • Family-focused culture • Reasonable revenue hour expectations • Technology that drives efficiency • Professional development opportunities • Competitive compensation