> Markdown version of [/jobs/ext/4680649-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/4680649-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Engineer

- **Company:** Cornerstone Barricades
- **Location:** Woodbridge Township, NJ, United States
- **Experience:** Experienced
- **Salary:** $125,000 - $135,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, CompTIA Security+, Cyber Security, Document Management Systems, File Systems, IT Management, Intrusion Detection Systems, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Microsoft Security Essentials, Remote Access Technology, Zero Trust Network Access, Security Information and Event Management, Mobile Security, File Transfer Protocol (FTP), Microsoft InTune, Falcon Platform, Patch Management, SentinelOne Expertise, Cisco
- **Published:** November 12, 2026
- **Apply:** https://greenbaumrowesmithdavisllp.betterteam.com/it-security-engineer/apply

## About the Role

* Experience: 3-5+ years of dedicated information security engineering experience. Prior experience in a professional services environment (law firm, accounting, finance) is highly preferred.

Technical Stack Mastery:

 * Advanced experience with Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview).
 * Hands-on proficiency with modern enterprise security platforms (e.g., CrowdStrike, SentinelOne, Cisco).
 * Strong working knowledge of secure file transfer protocols, data encryption standards, and remote access protocols (VPN, ZTNA).
 * Legal Tech Integration (Preferred): Familiarity securing legal technologies such as Document Management Systems (iManage, NetDocuments) or eDiscovery tools (Relativity).
 * Autonomy & Impact: Proven ability to work independently, manage multiple security tools simultaneously, and pivot quickly between daily operations and project engineering.
 * Soft Skills: Exceptional discretion regarding confidential data and the ability to explain technical risks simply to attorneys, partners, and clients.

Preferred Certifications:

 * Certified Information Systems Security Professional (CISSP).
 * CompTIA Security+ (Sec+) or Cybersecurity Analyst (CySA+).
 * Microsoft Certified: Azure/M365 Security Engineer Associate

## Description

The IT Security Engineer serves as the firm's primary technical defender and security subject matter expert. In a mid-sized firm of 200 people, this is a hands-on, high-impact role. You will balance daily technical security operations with strategic engineering tasks. You will safeguard highly confidential client data, maintain strict ethical walls, and ensure the firm meets rigorous Outside Counsel Guidelines (OCGs) and regulatory audits.
Core Responsibilities:

 * Security Operations & Engineering: Design, deploy, and manage the firm's security stack, including firewalls, Email Security gateways, and SIEM/log management platforms.
 * Interface with Security Vendors: Work with vendors to properly configure and deploy endpoint detection and response (EDR) and network IDS/IPS sensors.
 * Identity & Mobile Security: Administer identity governance (MFA, SSO, Conditional Access) and Mobile Device Management (MDM) policies to protect attorneys accessing client data remotely.
 * Ethical Walls & Data Isolation: Implement and audit security barriers within Document Management Systems (DMS) to prevent internal conflicts of interest and unauthorized file access.
 * Incident Response & Monitoring: Monitor automated alerts, investigate vulnerabilities and potential compromises, and act as a technical lead during security incident response or containment activities.
 * Vulnerability & Patch Management: Conduct regular internal vulnerability scans and mitigate system weaknesses across endpoints and servers.
 * Client Audits & Compliance: Partner with IT leadership to answer security questionnaires from corporate clients, demonstrating alignment with relevant standards (CIS, NIST, etc.).
 * Vendor & Third-Party Risk: Evaluate the security posture of third-party software and vendors, specifically those supporting eDiscovery, litigation support, and accounting.