3-5+ years of information security engineering experience, preferably in a professional services environment.
Advanced experience with Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview).
Hands-on proficiency with enterprise security platforms like CrowdStrike and SentinelOne.
Strong knowledge of secure file transfer protocols and data encryption standards.
Exceptional discretion regarding confidential data and ability to communicate technical risks simply.
Responsibilities
Design, deploy, and manage the firm's security stack including firewalls and SIEM/log management platforms.
Work with vendors to configure and deploy endpoint detection and response (EDR) and network IDS/IPS sensors.
Administer identity governance and Mobile Device Management (MDM) policies for remote access.
Implement and audit security barriers within Document Management Systems (DMS).
Monitor alerts, investigate vulnerabilities, and lead security incident response activities.
Conduct regular internal vulnerability scans and mitigate system weaknesses.
Partner with IT leadership to respond to security questionnaires from corporate clients.
Benefits
Full-time, five-day-per-week onsite position.
Collaborative work environment with attorneys and IT leadership.
Comprehensive benefits package.
Full Job Description
About the Job
Position Summary:
The IT Security Engineer serves as the firm's primary technical defender and security subject matter expert. In a mid-sized firm of 200 people, this is a hands-on, high-impact role. You will balance daily technical security operations with strategic engineering tasks. You will safeguard highly confidential client data, maintain strict ethical walls, and ensure the firm meets rigorous Outside Counsel Guidelines (OCGs) and regulatory audits.
Core Responsibilities:
Security Operations & Engineering: Design, deploy, and manage the firm's security stack, including firewalls, Email Security gateways, and SIEM/log management platforms.
Interface with Security Vendors: Work with vendors to properly configure and deploy endpoint detection and response (EDR) and network IDS/IPS sensors.
Identity & Mobile Security: Administer identity governance (MFA, SSO, Conditional Access) and Mobile Device Management (MDM) policies to protect attorneys accessing client data remotely.
Ethical Walls & Data Isolation: Implement and audit security barriers within Document Management Systems (DMS) to prevent internal conflicts of interest and unauthorized file access.
Incident Response & Monitoring: Monitor automated alerts, investigate vulnerabilities and potential compromises, and act as a technical lead during security incident response or containment activities.
Vulnerability & Patch Management: Conduct regular internal vulnerability scans and mitigate system weaknesses across endpoints and servers.
Client Audits & Compliance: Partner with IT leadership to answer security questionnaires from corporate clients, demonstrating alignment with relevant standards (CIS, NIST, etc.).
Vendor & Third-Party Risk: Evaluate the security posture of third-party software and vendors, specifically those supporting eDiscovery, litigation support, and accounting.
Required Qualifications & Skills:
Experience: 3-5+ years of dedicated information security engineering experience. Prior experience in a professional services environment (law firm, accounting, finance) is highly preferred.
Technical Stack Mastery:
Advanced experience with Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview).
Hands-on proficiency with modern enterprise security platforms (e.g., CrowdStrike, SentinelOne, Cisco).
Strong working knowledge of secure file transfer protocols, data encryption standards, and remote access protocols (VPN, ZTNA).
Legal Tech Integration (Preferred): Familiarity securing legal technologies such as Document Management Systems (iManage, NetDocuments) or eDiscovery tools (Relativity).
Autonomy & Impact: Proven ability to work independently, manage multiple security tools simultaneously, and pivot quickly between daily operations and project engineering.
Soft Skills: Exceptional discretion regarding confidential data and the ability to explain technical risks simply to attorneys, partners, and clients.
Preferred Certifications:
Certified Information Systems Security Professional (CISSP).
CompTIA Security+ (Sec+) or Cybersecurity Analyst (CySA+).
Microsoft Certified: Azure/M365 Security Engineer Associate
GIAC Security Essentials (GSEC).
Work Environment & Benefits: This is a full-time, five-day-per-week onsite position based at Greenbaum Law's Iselin, NJ office. The role requires a consistent in-office presence and daily collaboration with attorneys, IT leadership, and administrative staff. Remote or hybrid work is not part of the regular work arrangement. Greenbaum Law offers a competitive salary and comprehensive benefits package.
How to Apply: Interested candidates should submit a resume and a brief summary of relevant experience to with ISENJ in the subject line. Employment is contingent upon successful completion of a standard background screening.
