Senior Security Engineer

K&L Gates is a global law firm seeking a Senior Security Engineer to enhance their security capabilities in various environments. The role involves developing automation solutions, integrating security controls, and leading complex investigations to improve the firm's cybersecurity posture.

Responsibilities:

• Designing, implementing, and enhancing enterprise security solutions across cloud, on-premises, and hybrid environments
• Developing scalable automation and orchestration capabilities to improve security operations and reduce manual effort
• Creating automation solutions utilizing PowerShell, Python, REST APIs, Microsoft Graph, and cloud-native technologies
• Implementing and optimize Azure security controls, identity protections, encryption, and data security capabilities
• Integrating security controls throughout the technology lifecycle in partnership with infrastructure, cloud, and application teams
• Developing and maintaining security detections, analytics, correlation rules, and threat monitoring capabilities
• Enhancing security visibility through improved telemetry, logging strategies, and attack surface monitoring
• Applying threat intelligence and industry frameworks, including MITRE ATT&CK, to strengthen detection and response capabilities
• Leading or supporting complex investigations, threat hunting activities, and major incident response efforts
• Conducting security assessments, control validation activities, and supporting penetration testing initiatives
• Evaluating emerging security and AI technologies and recommending solutions that improve security maturity and operational effectiveness
• Leading technical initiatives, mentoring security engineers, and providing architecture guidance, standards, and documentation

Requirements:

• Possess Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related discipline, OR equivalent experience
• Understand Zero Trust principles, authentication, encryption, identity security, and data protection concepts
• Possess knowledge of SIEM, EDR/XDR, identity security, cloud security, and enterprise security monitoring technologies
• Possess solid knowledge of enterprise networking, operating systems, network security, and hybrid cloud architectures
• Possess relevant certifications such as CISSP, CCSP, GIAC (GCIA, GCIH, GCFA, GPEN, GWEB), Microsoft Security, Azure (AZ-500, SC-200, SC-100, AZ-305), Splunk, or CrowdStrike
• Demonstrate proficiency in automation and scripting using PowerShell, Python, REST APIs, Microsoft Graph, or similar technologies
• Have 7+ years of progressive experience in cybersecurity, security engineering, cloud security, or related technology fields
• Work experience with Microsoft security and cloud platforms such as Microsoft Defender, Sentinel, Entra ID, Purview, Azure Security services, or equivalent technologies
• Develop and refine security detections, analytics, and correlation rules to enhance system monitoring and threat response capabilities
• Demonstrate expertise in threat detection, incident response, threat hunting, and cyber threat actor tactics, techniques, and procedures (TTPs)
• Demonstrate experience supporting or working within a Security Operations Center (SOC) environment
• Demonstrate experience designing, implementing, and improving enterprise security capabilities