Principal Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee the information security systems and processes of the Firm, reporting to the Director of Security Engineering and Operations.

• Ensure the enforcement of security policies and manage the lifecycle of information security threats.

• Analyze and respond to security incidents escalated by the Security Operations Center.

• Coordinate actions to mitigate risks identified through automated systems.

• Provide expertise in information security concerning networks and systems.

• Manage security technologies, including antivirus, vulnerability scanning, intrusion detection, content filtering, and insider threat systems.

• Review security events from monitoring environments and SOC escalations on a daily basis.

• Adhere to established incident response procedures for analysis and reporting.

• Monitor venues for potential threats to the Wilson Sonsini environment.

• Inform affected parties of necessary actions to mitigate threats and oversee the threat lifecycle.

• Lead assessments of the firm’s environment conducted by external third parties and generate recommendations aligned with business needs.

• Stay informed about clients’ information security requirements and implement effective measures to address them.

• Track emerging security technologies and propose solutions.

• Design and develop scalable, reliable operational environments for security products.

• Troubleshoot information security issues and provide support to end users.

• Offer security consulting services to other teams and assist with specific projects.

• Perform additional duties as assigned by the supervisor.

⛳️ Requirements

• A Bachelor’s degree is required.

• A minimum of 5 years of experience in Information Security is necessary.

• One or more of the following certifications is preferred: GIAC, CISSP, CISM, CEH, CIPP.

• Knowledge of direct support for SIEM systems, Red Teaming concepts and execution, and proficiency with the Linux command line and operational/administrative tasks.

• Extensive understanding of traditional security controls and technologies, including SIEM, IDS/IPS, PKI, IDAM, antivirus, and firewalls.

• Familiarity with EDR, threat intelligence platforms, security automation and orchestration, deception technologies, and application controls.

• Experience in securing Windows desktop, server, and database environments.

• Capability to identify security technology risks and conduct incident responses.

• In-depth knowledge of TCP/IP networking, including wireless, network monitoring/design, and routing.

• Comprehensive understanding of the cyber kill-chain.

• Experience with cloud computing technologies, such as SaaS, IaaS, and PaaS, across public, private, and hybrid environments.

• Experience in a law firm or professional services firm environment is desirable.

• Excellent verbal and written communication skills.

• Ability to communicate effectively with both technical and non-technical audiences.

• Maintain compliance with company policies and procedures.

🏝️ Benefits

• A highly competitive salary along with a comprehensive benefits package.

• Discretionary year-end merit bonus based on performance.