Information Security Engineer

Information Security Engineer

The Information Technology Department of Arnold & Porter has an opening for an Information Security Engineer in the Washington, DC office or may work 100% virtual / remote in a firm-approved U.S. state as part of the “Gideon” office. The Information Security Engineer is a technical security expert responsible for supporting security operations, engineering, and architecture functions and efforts for Arnold & Porter. Under the direction of the Manager of Information Security, the Information Security Engineer helps to ensure the overall security posture of the firm, and is expected to be involved in day-to-day security operations and contribute to ensuring the integrity and availability of the firm’s IT and application infrastructure and the confidentiality, integrity, and availability of the firm’s data in support of enterprise IT objectives and client service delivery needs.

Responsibilities

Security Operations

• Performing security log and event analysis using EDR, SIEM and log aggregation systems.
• Monitoring and proactively executing the vulnerability management program to prevent or reduce IT hygiene risk issues from impacting production systems.
• Maintaining and managing security toolsets such as Application control systems, EDR / AV, Email Security platform, Attack simulation platform, Threat intelligence / hunting, and Security related artificial intelligence tools.
• Supporting security incident response and investigation efforts as directed.
• Helping validate and track IT operational activities to ensure compliance with policy, standards, and other applicable requirements.
• Researching and identifying security vulnerabilities and relevant industry / cybersecurity trends for follow-up and action.
• Regularly reporting and tracking IT security events and metrics along with remediation activities.
• Helping support third‑party risk management efforts as assigned.
• Helping support the firm security awareness training program as assigned.
• Helping support the firm’s IT Compliance efforts as assigned.
• Participating in IT Security on‑call rotation.

Security Engineering & Architecture

Qualifications

Education / Experience

Technical Skills

Communication & Writing

Professionalism & Judgment

Problem‑Solving & Strategic Focus

Flexibility & Commitment

The anticipated base salary for this position is $122,000 to $160,000. The actual base salary offered will depend on a variety of factors, including, without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and / or from which they will be performing the job.

The firm may provide a discretionary bonus annually.

Arnold & Porter is an equal opportunity employer that does not discriminate on the basis of race, color, creed, religion, national origin, sex, pregnancy and childbirth (including breastfeeding and related medical conditions), age, marital or partnership status, familial status, sexual orientation, gender, gender identity, gender expression, transgender, physical or mental disability, medical condition, family leave status, citizenship status, immigration status, ancestry, genetic information, military or veteran status, or any other characteristic protected by local, state or federal laws, rules or regulations. Our Firm's equal opportunity policy applies to all employment practices and terms and conditions, including, without limitation, recruitment, employment, assignment, training, compensation, benefits, promotions, disciplinary action and terminations. For purposes of the firm's Anti-discrimination and Anti-harassment Policies, the term "race" includes, without limitation, traits historically associated with race, including, but not limited to, hair texture and protective hairstyles, such as braids, locks, and twists.

#J-18808-Ljbffr