Information security engineer [h1.location_city]

This role is primarily responsible for executing the tactical and strategic initiatives of the Information Security team to include programs such as risk and vulnerability management, incident response, security architecture, cloud security and third-party vendor management. Work is typically assigned by the Information Security Manager, although the Information Security Analyst is expected to operate with minimal oversight and be able to identify areas of opportunity to get involved with information security tasks and initiatives. The ideal candidate is comfortable working in a fast-paced environment, communicating to technical and non-technical staff, and capable of switching between tasks as situations and criticality arise and be passionate about learning and continuous education.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned.

• Execute on security strategy as defined by the Information Security Manager.
• Participation in the Firm’s Vulnerability Management Program, working with cross-functional teams to identify, manage and mitigate security vulnerabilities across the Firm.
• Assist with the administration of the Firm’s Vendor Risk Management process, including analyzing and responding to third-party risk assessments.
• Monitor and respond to information security alerts and notifications (IDS / IPS, SIEM, AV / EDR, etc.).
• Design, review and administer Azure cloud security controls and architecture, including auditing Azure cloud environments.
• Utilize scripting languages such as PowerShell and Python to automate tasks and improve security operations.
• Collaborate and advise on IT projects to ensure security issues are addressed throughout the project life cycle.
• Assist other IT teams in developing and employing security solutions across various applications and product platforms.
• Administer and utilize various endpoint and network security tools, such as CrowdStrike, SIEM tools, Fortinet or other comparable advanced detection and response tools.
• Administer and utilize vulnerability scanning, packet analysis and exploitation tools such as Nessus, nmap, Wireshark, tcpdump, Metasploit or similar technologies.
• Design, review and aid with implementation of secure networks and system architecture (ex. network topology reviews, firewall ruleset reviews, minimum security baselines, etc.).
• Apply appropriate controls referenced in various security frameworks and standards, such as the NIST CSF Framework, NIST -, CIS Controls, etc.
• Monitor and secure Microsoft client and server systems, along with Fortinet and Cisco (or comparable) network devices.
• Assist with the management and maintenance of user security policy education, training and awareness programs.
• Conduct security research to stay abreast of latest security issues, including laws and regulations which may affect the Firm.
• Other duties as requested and assigned.

QUALIFICATION REQUIREMENTS : To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION / EXPERIENCE :

Preferred Certifications : Certified Information Systems Security Professional (CISSP)

GIAC GSEC, GCIH, GCIA, GCWN, or equivalent certification

CompTIA Security+, CySA+, Network+, CASP or equivalent certification

Microsoft Azure Security Certifications ( AZ-, SC- to SC-)

TECHNICAL SKILLS :

LANGUAGE SKILLS :

MATHEMATICAL SKILLS :

REASONING ABILITY :

OTHER SKILLS and ABILITIES :

PHYSICAL DEMANDS : The physical demands described here are representative of those that should be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

WORK ENVIRONMENT : The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The salary offered in any location will be determined by a wide range of factors, including, but not limited to, experience level, education / training, geographic region, and relevant skills. Associates also participate in a performance- and hours-based bonus program. The expected annual salary for this position ranges from $,- $,

Baker & Hostetler LLP is an Equal Opportunity Employer.

LI-Remote