IT Security Engineer

Job Title: IT Security Engineer Position Overview: Greenbaum Law is seeking a hands-on, high-impact IT Security Engineer to serve as our primary technical defender and security subject matter expert. In this role, you will safeguard highly confidential client data, maintain strict ethical walls, and balance daily operations with strategic engineering.  Core Responsibilities Security Operations & Engineering: Design, deploy, and manage the firm’s security stack, including firewalls, email gateways, and SIEM platforms. Vendor & EDR Management: Partner with external vendors to configure and deploy EDR and network IDS/IPS sensors. Identity & Mobile Security: Administer identity governance (MFA, SSO, Conditional Access) and MDM policies for secure remote access. Ethical Walls & Data Isolation: Implement and audit security barriers within Document Management Systems (DMS) to prevent conflicts of interest. Incident Response: Monitor automated alerts, investigate potential compromises, and act as technical lead during incident containment. Vulnerability Management: Conduct regular internal scans and manage routine system patching across endpoints and servers. Client Audits & Compliance: Partner with IT leadership to answer client security questionnaires aligned with CIS and NIST standards. Third-Party Risk: Evaluate the security posture of vendors supporting eDiscovery, litigation support, and accounting. Required Qualifications & Skills Experience: At least 3+ years of dedicated information security engineering experience. Prior experience in a professional services environment (law firm, accounting, finance) is highly preferred. Technical Stack Mastery: Experience: At least 3 years of dedicated information security engineering experience. Professional services experience (law firm, finance, accounting) is highly preferred. M365 Security Stack: Advanced experience with Microsoft 365 Security Suite (Defender, Intune, Entra ID, Purview). Enterprise Platforms: Hands-on proficiency with modern enterprise platforms (e.g., CrowdStrike, SentinelOne, Cisco). Network & Protocols: Strong knowledge of secure file transfers, data encryption, and remote access (VPN, ZTNA). Autonomy: Proven ability to manage multiple tools independently and pivot quickly between daily operations and project engineering. Soft Skills: Exceptional discretion regarding confidential data and the ability to explain technical risks simply to non-technical stakeholders. Preferred Qualifications Legal Tech: Familiarity securing Document Management Systems (iManage, NetDocuments) or eDiscovery tools (Relativity). Certifications: Certified Information Systems Security Professional (CISSP). Security+ or equivalent is required with more advanced certifications preferred. Work Environment & Benefits: This is a full-time, onsite position. Candidates must be comfortable working collaboratively in person with attorneys and administrative teams. We offer a competitive benefits package alongside the base salary. How to Apply: Qualified candidates should submit a resume and a brief summary of relevant experience to HR@greenbaumlaw.com using ISENJ as the subject line. Greenbaum, Rowe, Smith & Davis, LLP is an Equal Opportunity Employer and committed to diversity and inclusion in the workplace. Individuals seeking employment at the firm are considered without regard to race, color, religion, sex, sexual orientation, gender identification, national origin, age, marital status, ancestry, physical or mental disability, veteran status, or genetic information, among other protected bases. Prior to receiving an offer of employment, a standard background check must be completed.