Security-Engineering, Infosec, Cybersecurity Jobs

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.

Essential Duties and Responsibilities:

The Principal Security Engineer, under the direction of the Director of Security Engineering and Operations, is responsible for managing the Firm’s information security systems and processes, assuring enforcement of security policies, managing the information security threat lifecycle, analyzing and responding to security events escalated by the Security Operations Center (SOC) and coordinating actions to limit risks identified through our automated systems. The Senior Security Engineer is accountable for providing expertise and support in the areas of security engineering, incident response and risk management.

This role can be 100% remote.

• Provide subject matter expertise in information security as it relates to networks and systems
• Manage the Firm’s security technology including but not limited to: anti-virus, vulnerability scanning, intrusion detection, content filtering, and insider threat systems
• Review security events from all monitoring environments not integrated with the firm SIEM, and those events escalated by the SOC, on a daily basis, and follow defined incident response processes in their analysis and reporting
• Monitor appropriate venues for threats to the security of the Wilson Sonsini Goodrich & Rosati environment. Provide notification to all impacted parties related to the actions needed to mitigate threats and manage the threat lifecycle in totality
• Manage and lead evaluations of the firm’s environment by external 3rd parties. Produce recommendations that integrate any findings with the business needs of the firm
• Maintain knowledge of the information security needs of firm clients and implement measures to satisfy those requirements in the most efficient manner
• Keep abreast of emerging security technologies and discipline developments. Make appropriate recommendations that meet the firms needs
• Design and build operational environments that scale to meet the needs of our security products and assure appropriate reliability
• Support general troubleshooting related to information security tasks and provide support to end users as needed
• Provide other teams with security consulting services, including responding to requests for additional information and assisting with specific projects
• Perform related duties as assigned by supervisor
• Maintain compliance with all company policies and procedures

Education and/or Work Experience Requirements:

• Bachelor’s degree required
• 5+ of experience in Information Security
• One or more of the following certifications preferred: GIAC, CISSP, CISM, CEH, CIPP
• Focus on knowledge of direct support for Security Information and Event Management (SIEM) systems (e.g. configuration of feeds, developing alarm/report concepts), Red Teaming concepts and execution, and Linux skills including command line and operational/administrative usage
• Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls
• Experience with windows desktop, server, and database security
• Ability to identify security technology risks and perform incident response
• Extensive knowledge of TCP/IP networking including wireless, network monitoring/design and routing
• Extensive understanding of the cyber kill-chain
• Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private, and hybrid environments
• Experience working in a law firm or professional services firm environment desired
• Excellent verbal and written communication skills, including ability to effectively communicate with internal and external customers and communicate clearly and effectively with people from both technical and non-technical backgrounds

The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.

Benefits information can be found here. Equal Opportunity Employer (EOE).

Originally posted on Himalayas

At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose.

HONESTY, RELIABILITY, COLLABORATION, CURIOSITY, PASSION

Role Summary

The Senior Information Security Engineer is responsible for designing, implementing, and maintaining enterprise‑level security solutions while providing technical leadership across the organization. This role supports global cybersecurity initiatives, leads incident response activities, and ensures alignment with internal and external compliance requirements. The position requires deep technical expertise, strong communication skills, and the ability to operate effectively in a fast‑paced environment.

What You Will Do:

• Design, implement, and administer enterprise information security solutions.
• Serve as a Tier‑3 escalation point for monitoring and responding to security incidents.
• Implement controls and processes to meet internal and customer audit requirements.
• Develop internal and customer‑facing security standards, policies, and procedures.
• Execute incident response activities in accordance with the Ensono Incident Response Plan.
• Evaluate, test, and deploy security application upgrades and patches.
• Deliver consultative expertise on emerging threats, vulnerabilities, and risk mitigation strategies.
• Document project plans, including timelines, milestones, and deliverables.
• Mentor new and existing members of the security organization.
• Provide recommendations and contribute to the development of security product roadmaps.
• Partner with product owners to ensure alignment between solutions and security product offerings.

We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.  

What You Will Need:

• 5 -10 years of full‑time experience in information security roles.
• Experience with security deployment using Azure Cloud.
• Background in Security‑as‑a‑Service (SaaS) implementations.
• Strong knowledge of digital forensics or penetration testing methodologies.
• Experience with file integrity monitoring solutions.
• Proficiency with vulnerability scanning tools and risk evaluation processes.
• Experience with password vaulting technologies for secure credential storage.
• Hands‑on experience implementing and maintaining security frameworks such as PCI‑DSS, SSAE SOC1/SOC2, GDPR, HIPAA, IRS Pub 1075, NIST, and ISO 27001.
• Experience conducting security incident response in large enterprise environments.
• Expertise in deploying and maintaining anti‑malware technologies.
• Familiarity with security auditing and forensic analysis tools.
• Experience implementing SIEM platforms.

Preferred Tools and Technologies

MS Sentinel, Splunk, Microsoft Defender, Trend Micro, Trellix, Carbon Black, Tenable, Rapid7, Varonis, Microsoft Purview, Azure Cloud.

Education and Certifications

• Security certifications such as CISSP, CISA, CISM, CEH, or SANS GIAC.
• Bachelor’s degree in Information Security or equivalent professional experience.

Why Ensono?

Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it.

We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home or in our Ensono offices.

Some of our benefits include:

• Unlimited Paid Days Off

• Three health plan options

• 401k with company match

• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts

• Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement

• Paid childbearing and paternal leave

• Education Reimbursement, Student Loan Assistance or 529 College Funding

• Sabbatical leave

• Wellness program

• Flexible work schedule

As of the date of this posting, a good faith estimate of the current pay scale for this role is $112,000 to $130,000 annually based on a full-time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance [OR] a role-based, sales-incentive plan, and an equity grant under our Associate Equity Appreciation Program.

Ensono is an Equal Opportunity/Affirmative Action em1ployer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.

Pay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website.

If you need accommodation at any point during the application or interview process, please let your recruiter know or email .

Originally posted on Himalayas

The Security Engineer is responsible for testing, deploying, documenting, and improving internal security controls for safety, soundness, and operational efficiency. This role includes project work, including meetings, design, and project tasks. This position requires collaboration with different stakeholders to ensure board approved risk appetite is maintained and deliverables are met. This position includes on-call responsibilities on a rotating basis.

Work Arrangement:This position is able to work onsite, hybrid, or remote (must reside within the State of Michigan).

To be considered for this role, candidate must currently reside, or have plans to reside upon hire, within the state of Michigan as described above. Occasional travel on a quarterly basis to MSUFCU Headquarters (East Lansing, MI) may be needed.

Schedule- Monday - Friday 8:30am - 5:00pm ET.

An offer of employment with MSU Federal Credit Union and affiliates is contingent upon the agreed work arrangement (onsite/hybrid/remote) and work location. MSU Federal Credit Union may or may not be able to accommodate temporary or permanent changes to work arrangements or allow employment outside the city and/or state of residency in which the new hire resides at the time of offered employment.

Compensation & Benefits:

• Salary Range: Principal Security Engineer - $120,000 - $150,000+ annually, depending on experience
• 100% Company-Paid Health, Dental, Vision, Life, and Long-Term Disability Premiums
• Up to 26 days of PTO within your first year, as well as Volunteer Time Off & 11 Paid Holidays
• 401(k) with a company match
• Tuition Reimbursement
• Up to 12 Weeks of Paid Parental Leave
• Learn more about our benefitshere

Essential Duties and Responsibilities:

• Collaborate on critical IT projects to ensure that security issues are addressed throughout the project life cycle. Participate in project meetings, consult on security related topics, and execute on security related tasks resulting from those projects.
• Manage security configurations and operation standards for security systems and applications.
• Manage advanced security technologies, including but not limited to: SIEM/SOAR, Firewalls, IPS, Endpoint Protection, DLP, and email security technologies.
• Assist in the collection of system information and procedures required by internal and external audits and examinations.
• Assist Security Operations team with security incident response, including determination of root cause, as needed.
• Understand the Credit Union's policies and procedures to ensure compliance and accountability for managing operational risks. Adhere to established internal controls and procedures to safeguard assets, prevent fraud, and maintain the integrity of credit union operations.
• Participate in threat assessments, documenting risk and compensating controls.
• Test, implement, and document new security controls in partnership with stakeholders.
• Lead complex security projects and initiatives independently.
• Assist members of the Security Engineering team with complex problems. Participate in knowledge transfer to junior Security Engineers.
• Create and maintain Security Engineering standard-type procedures and documentation.
• Assist with strategic direction of the Information Security Program.
• Align with Security Operations and Security Architecture regarding security program objectives.
• Assist in the development of education and training materials for consumption by different business units and stakeholders.
• Perform other duties as assigned.

Job Requirements:

• High School Diploma or equivalent required.
• Bachelor’s degree in Cybersecurity, Information Security, or similar -OR- 5+ years of experience in Cybersecurity, Information Security, or similar in lieu of a degree
• Previous experience leading a security engineering team from an individual contributor or peer leadership perspective.
• Advanced security certifications required (i.e. GIAC, CISSP, or equivalent)
• CompTIA Sec+ is required.

Competencies:

• Core Competencies that must be demonstrated by all Credit Union employees include Communicate, Navigate Change & Evolve, Solve Problems & Make Decisions, Plan, Prioritize, and Achieve, and Collaborate.
• Functional Competencies:

• • Adaptability - Adapts quickly to change and considers new approaches
  • AI & Digital Proficiency - Leverages artificial intelligence and digital tools to enhance decision-making, identify trends, and manage emerging risks. Applies AI-driven insights to support due diligence, validate outcomes, and refine prompt engineering techniques. Continuously adapts to advancements in AI to improve efficiency and effectiveness within the role.
  • Analytical Thinking - Breaks down complex information into smaller parts.
  • Critical Thinking - Takes outside knowledge into account while evaluating information.
  • Initiative - Takes proactive and prompt action to accomplish work goals. Takes action to achieve results beyond requirements.
  • Research - Investigates and studies sources to understand situations before reaching conclusions or acting.
  • Resilience - Thrives and grows in a rapidly changing and complex environment. Displays flexibility, utilizes networks, and adopts a continuous growth mindset to learn from mistakes and bounce back from adversity.
  • Teamwork - Works well with internal and cross-functional teams to achieve individual, team, department, and/or organizational goals. Values diverse perspectives and working with others to achieve the best outcome possible.
  • Time Management - Manages time and resources to ensure work is completed efficiently.

Physical Demands and Work Environment

• May be required to remain in a stationary position for an extended period.
• Ability to operate standard office technology, equipment, and tools, which may include many hours of computer and phone usage.
• Occasionally needs to move about inside of an office area.
• Exposure to potentially hazardous condition, i.e. robbery. Receives detailed instructions and procedures to be followed to minimize the exposure.
• This position can work in remote, hybrid, or onsite working arrangements.

Disclaimer:

• Note this job description is not intended to be construed as an exhaustive list of all functions, responsibilities, skills, and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and MSU Federal Credit Union reserves the right to change this position description and/or assign tasks for the employee to perform, as MSUFCU may deem appropriate.
• MSUFCU is an affirmative-action, equal-opportunity employer.
• To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

Originally posted on Himalayas

The Security Engineer is responsible for designing, implementing, and operating security controls that protect the organization’s infrastructure, applications, and data. This role serves as a technical bridge between security strategy and hands-on execution.

The position includes implementing and managing security solutions such as firewalls, EDR, IAM, SIEM, and cloud security controls. The Security Engineer contributes to system hardening, secure configuration standards, technical risk analysis, and incident response from an engineering perspective.

The role requires the ability to work cross-functionally with IT, cloud, and development teams, along with a solid understanding of architecture, networking, operating systems, and core security principles. The Security Engineer also supports the continuous improvement of the organization’s security posture and adoption of best practices aligned with business objectives.

Originally posted on Himalayas