Information Security Engineer - Detection and Response

Information Security Engineer – Detection & Response

Join our Information Security team as an Information Security Engineer – Detection & Response, where you’ll play a critical role in safeguarding the firm by monitoring and responding to security threats, managing and enhancing advanced security technologies, investigating incidents and phishing attempts, and partnering with technical and non‑technical stakeholders to strengthen our overall security posture in a dynamic, fast‑paced legal environment.

• Support security operations of the firm.
• Administer and maintain the firm’s security systems, such as SIEM, malware analysis, XDR, anomaly detection, vulnerability scanners, anti‑virus, etc.
• Make recommendations and assist with configuration changes to existing systems to address newly identified vulnerabilities.
• Provide security education to users through phishing exercises.
• Proactively review security systems for indicators of compromise, violations of policy, and anomalous behaviors.
• Assist in investigations of security incidents as needed.
• Prepare and maintain documentation of systems managed by the Information Security team.
• Recommend, evaluate, and support security enhancements to management.
• Provide evidence for various compliance initiatives when required.
• Maintain current knowledge of industry‑recognized risks and possible security vulnerabilities as well as current security solutions.
• Provide backup support for other members of the Information Security team.
• Support initiatives and special projects of other Information Systems teams as required.
• Provide system hardening recommendations.
• Assist in troubleshooting of problems of various types.
• Support users.
• Respond to reports of incidents of compromise and malicious emails.
• Provide guidance regarding secure application and system configuration.
• Resolve security‑related calls referred by the Help Center when the calls are beyond the scope of the Help Desk.
• Assist with execution of security assessments by third parties.

• Ability to communicate effectively with technical and non‑technical individuals regarding security concerns, problems, and questions.
• Solid and broad technical foundation.
• Awareness of relevant compliance requirements (ISO
  27001, HIPAA, state privacy laws, etc.).
• Ability to multitask and switch focus among multiple different efforts quickly.
• Ability to quickly learn new applications and adjust to upgrades to existing applications.
• Excellent organizational and self‑management skills.

• Experience with administration of security systems (vulnerability scanner, endpoint detection and response, SIEM, etc.), networking protocols, Microsoft and Linux systems, cloud and mobile technologies.
• Associate or bachelor’s degree is not required but strongly preferred.
• Minimum of 3 years prior experience in a role focused on operational support is required.
• Applicable certifications (ISSEP/CISSP, GIAC) strongly preferred.
• Previous experience in the legal field is desired.

Alston & Bird LLP is an Equal Opportunity Employer and does not discriminate on the bases of any status protected under federal, state, or local law. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military service, veteran status, or other protected category under the law on the basis of race, color, religion, sex, age, sexual orientation, gender identity and/or expression, national origin, veteran status or disability in relation to our recruiting, hiring, and promoting practices.