About Us

For professional staff, Winston & Strawn presents an exciting opportunity to be a part of a leading global law firm. With our commitment to excellence, diversity, a collaborative work environment, and an emphasis on professional growth, Winston offers a platform for individuals seeking to advance their careers in a dynamic and rewarding environment. Winston is known for its collaborative and collegial culture. We believe teamwork is an essential component in providing high-quality legal services and we value the talents and skills of our entire professional staff team.

POSITION SUMMARY:

The firm is looking for a highly motivated, driven, and collaborative professional to join Winston & Strawn’s Information Risk and Security team. The Information Security Engineer will be responsible for building, implementing, and managing a variety of security technologies across the firm’s security program. This role will require an individual to be capable of working with a high-level of autonomy, as well as collaborating with other teams, departments, and practice areas. The ideal candidate has diverse security background, is comfortable with change, and has a genuine passion to learn.

DUTIES AND RESPONSIBILITIES:

Supports and maintains a wide variety of security processes and technologies across several functional security domains, including identity solutions (IdP, PAM, MFA), network and software firewalls (NGFW), intrusions detection/prevention systems (IDS/IPS), web and DNS filtering (SWG, CASB), end-point security solutions (NGAV/EDR), security event monitoring (SIEM) platforms, vulnerability scanning, and data loss prevention (DLP) solutions.
Supports operational security activities and existing processes to drive continuous improvement.
Supports security monitoring, alerting and incident investigation activities. Assists with threat hunting and enhancing the firm’s detection capabilities.
Assists with the monitoring and handling of internal information security support tickets and escalations.
Coordinates and drives remediation of identified risks and control deficiencies.
Assists and supports threat and vulnerability management processes, including threat identification and patching procedures.
Assists in developing and prototyping security automation integrations and runbooks.
Provides information security guidance and risk management advisory on planned projects and changes.
Assists in the development of security policies, procedures, and hardening guides / baseline security standards.

BASIC QUALIFICATIONS:

3 + years of years of hands-on experience in multiple domains of information security required.
Minimum of one + years of scripting or programming language. Capable of working with various APIs in a security context required.
This role is fully remote but must reside in a commutable distance to a local office required.

ADDITIONAL QUALIFICATION:

Bachelor’s degree in information security, information technology, computer science, or related field preferred.

COMPETENCIES:

Solid understanding of fundamental information technology concepts (networking, system administration, endpoint management, identity, etc.).
Strong understanding of security fundamentals and best practices.
Knowledge and hands-on experience in at least two of the following areas:
- Demonstrates knowledge and hands-on experience with various cloud provider platforms (e.g., Azure, AWS, GCP).
- Has practical experience working with endpoint security products (CrowdStrike, MS Defender, Sentinel One).
- Has practical experience working with leading identity and privileged management platforms (e.g., Okta, Entra, CyberArk, BeyondTrust).
- Experience building out use cases in leading security automation platforms (e.g., Tines, XSOAR, CS Fusion).
- Has practical experience working with leading log management and SIEM platforms (e.g., Splunk, CrowdStrike LogScale, Cribl).
- Has hands-on experience working with leading vulnerability scanners (Nessus, NeXpose, Qualys).
Strong problem-solving skills and the ability to resolve complex issues.
Approaches unknowns and challenges with tenacity; ability to solve problems with creativity.
Ability to work both independently and collaborate in cross-functional teams; communicates effectively.
Excellent written and verbal communication skills. Ability to write with purpose, clarity, and accuracy.

Benefits

In addition to paying competitive, market-based salaries, Winston offers comprehensive benefits that provide a full spectrum of coverage and support for our full-time employees and their families. Our generous benefits and perks, which are subject to eligibility and may change from time to time, include:

HEALTH & WELL-BEING

Medical, dental, and vision plans - coverage begins on the first day of employment
Life & disability insurance
Pre-tax commuter benefit
Employee assistance program
Free premium access to the Calm app
Mental health first aid responders Transparency in Coverage

WORK-LIFE INTEGRATION

24/7 concierge service
Back-up child and elder care through Bright Horizons
Free overnight shipment of breast milk for nursing moms when they travel for work
On-site nursing rooms

RETIREMENT

401(k) retirement plan
Firm-funded retirement plan

TIME OFF

10 paid holidays per year
10 sick/personal days per year
Paid vacation time
Up to 2 days of paid time off to participate in Winston for Good activities

SALARY

New York based applicants only: The target annual salary range for this role is currently $135,000- $152,000 based on a regular, full-time schedule. The amount of compensation offered will be determined by several factors, including but not limited to experience, qualifications ,market data and internal equity. Total compensation may include an annual discretionary merit bonus, yearly retirement plan contribution, and a comprehensive benefits package.

L os Angeles based applicants only: The target annual salary range for this role is currently $125,000 - $141,000 based on a regular, full-time schedule. The amount of compensation offered will be determined by several factors, including but not limited to experience, qualifications, market data and internal equity. Total compensation includes a comprehensive healthcare benefits package, yearly retirement contribution, and may include an annual discretionary merit bonus.

We value diversity in the workplace. EOE/Minorities/Females/Vets/Disabled (EOE=Equal Opportunity Employer)

Winston & Strawn LLP jobs

New York - Information Security Engineer