Security Engineer

The role

You will lead the design, implementation, and continuous improvement of the firm's cybersecurity program. You will drive security strategy, incident response, risk management, and security architecture initiatives.

What you will do

• Design, implement, and maintain enterprise security infrastructure.
• Lead the execution of the firm's cybersecurity strategy and roadmap.
• Monitor security systems, investigate alerts, and coordinate responses to security incidents.
• Conduct vulnerability assessments and penetration testing activities.
• Develop, maintain, and enforce security policies, standards, and procedures.
• Manage identity and access management solutions.
• Support security and privacy compliance initiatives, audits, risk assessments, and third-party vendor security reviews.
• Administer and optimize security tools.
• Lead incident response, business continuity, disaster recovery, and major security-focused projects.
• Collaborate with infrastructure, cloud, and business teams to integrate security requirements.

Required qualifications

• Bachelor's degree in Information Security, Information Technology, Information Systems, or a related field, or an equivalent combination of education and experience.
• Five or more years of progressive experience in cybersecurity or information security.
• Strong knowledge of network security, operating system hardening, Azure security, and modern security architectures, including zero-trust principles.
• Hands-on experience with SIEM platforms, vulnerability management tools, endpoint detection and response (EDR), firewalls, and IDS/IPS technologies.
• Working knowledge of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, and SOC 2.
• Understanding of identity and access management technologies and protocols, including SAML, OAuth, LDAP, and directory services.
• Experience with scripting and automation tools such as PowerShell and Python.
• Exceptional analytical, troubleshooting, and problem-solving abilities.
• Strong written and verbal communication skills.
• Ability to manage multiple priorities, work independently, and maintain confidentiality in a professional services environment.

Nice to have

• Industry certifications such as CISSP, CISM, CEH, GIAC, or CompTIA Security+
• Master's degree in Cybersecurity, Information Security, or a related discipline

Benefits

• Professional development
• Challenging and rewarding career paths
• Competitive compensation

About the company

McNees, Wallace & Nurick LLC is a full-service law firm with more than 170 attorneys and 350 professionals. Headquartered in Harrisburg, Pa., it operates offices across Pennsylvania, Maryland, Ohio, and Washington, D.C.