IT Security Engineer

The IT Security Engineer serves as the firm’s primary technical defender and security subject matter expert. In a mid-sized firm of 200 people, this is a hands-on, high-impact role. You will balance daily technical security operations with strategic engineering tasks. You will safeguard highly confidential client data, maintain strict ethical walls, and ensure the firm meets rigorous Outside Counsel Guidelines (OCGs) and regulatory audits. Core Responsibilities:

• Security Operations & Engineering: Design, deploy, and manage the firm’s security stack, including firewalls, Email Security gateways, and SIEM/log management platforms.
• Interface with Security Vendors: Work with vendors to properly configure and deploy endpoint detection and response (EDR) and network IDS/IPS sensors.
• Identity & Mobile Security: Administer identity governance (MFA, SSO, Conditional Access) and Mobile Device Management (MDM) policies to protect attorneys accessing client data remotely.
• Ethical Walls & Data Isolation: Implement and audit security barriers within Document Management Systems (DMS) to prevent internal conflicts of interest and unauthorized file access.
• Incident Response & Monitoring: Monitor automated alerts, investigate vulnerabilities and potential compromises, and act as a technical lead during security incident response or containment activities.
• Vulnerability & Patch Management: Conduct regular internal vulnerability scans and mitigate system weaknesses across endpoints and servers.
• Client Audits & Compliance: Partner with IT leadership to answer security questionnaires from corporate clients, demonstrating alignment with relevant standards (CIS, NIST, etc.).
• Vendor & Third-Party Risk: Evaluate the security posture of third-party software and vendors, specifically those supporting eDiscovery, litigation support, and accounting.

• Experience: 3-5+ years of dedicated information security engineering experience. Prior experience in a professional services environment (law firm, accounting, finance) is highly preferred.

Technical Stack Mastery:

• Advanced experience with Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview).
• Hands-on proficiency with modern enterprise security platforms (e.g., CrowdStrike, SentinelOne, Cisco).
• Strong working knowledge of secure file transfer protocols, data encryption standards, and remote access protocols (VPN, ZTNA).
• Legal Tech Integration (Preferred): Familiarity securing legal technologies such as Document Management Systems (iManage, NetDocuments) or eDiscovery tools (Relativity).
• Autonomy & Impact: Proven ability to work independently, manage multiple security tools simultaneously, and pivot quickly between daily operations and project engineering.
• Soft Skills: Exceptional discretion regarding confidential data and the ability to explain technical risks simply to attorneys, partners, and clients.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+ (Sec+) or Cybersecurity Analyst (CySA+).
• Microsoft Certified: Azure/M365 Security Engineer Associate

Work Environment & Benefits: This is a full-time, five-day-per-week onsite position based at Greenbaum Law’s Iselin, NJ office. The role requires a consistent in-office presence and daily collaboration with attorneys, IT leadership, and administrative staff. Remote or hybrid work is not part of the regular work arrangement. Greenbaum Law offers a competitive salary and comprehensive benefits package.