Cloud Security Engineer

Vedder's Chicago office is seeking a Cloud Security Engineer. The Cloud Security Engineer is primarily responsible for maintaining technologies to ensure the security of the firm's systems. Thorough understanding on both product based solutions and fundamental security best practices are vital to this role. The Cloud Security Engineer will collaborate with other Engineers and SMEs, to apply and support best practices for information and cyber security, system building, change management, account management, documentation, and user experience management.

• Serve as a technical engineering resource for cloud and information security.
• Collaborate with other staff in the Technology Department to ensure that security standards are developed and enforced in the course of implementing or upgrading firm technology, educating others on security best practices.
• Design, engineering, automation, and operational support of cloud and security infrastructure on Vedder Price's network, including the following:
• Cloud platforms and services including Azure, M365, Defender, and cloud-native security controls
• Identity Management on-prem and in the Cloud
• Event and Log Management on-prem and in the cloud
• SASE (Secure Access Service Edge) firewalls
• Intrusion detection and prevention
• Review of business processes, recommendation and implementation of supportable security changes including any relevant tools to better secure those processes
• Evaluation of security practices around identity management, remote solutions, including AVD and privileged remote access
• Participation in incident response plan for vulnerabilities or other security events
• Investigation of actual and suspected security breaches
• Architect and enforce consistent security controls and policies across cloud, hybrid, and hosted services
• Engineering, automation, and optimization of cloud logging, monitoring, and security alerting systems
• Generating evidence for compliance/audit
• Working with vendors as necessary to supplement our security capabilities, and recommend their use when appropriate
• Backup assistance for other Network Operations team members as necessary
• Assistance with all projects and tasks related to the firm as directed by the Senior Manager Infrastructure & Security and the Information Security Architect

• Advanced engineering-level proficiency with cloud platforms and security technologies, including demonstrated willingness and ability to develop expertise in new technologies as needed
• Demonstrated competence in detecting and eliminating technical issues in complex systems, utilizing monitoring and other analysis tools to ensure optimal system performance
• Investment in understanding technologies outside of those directly supported by the Analyst, including demonstrated basic awareness of key functionality of systems that interact with or depend upon the systems directly managed by the Analyst
• Ability to participate in assessing business purpose of managed systems and to recommend operational or efficiency-related improvements
• Ability to act independently to meet goals and objectives identified by senior management, including the ability to assist in the creation of project plans and manage time effectively
• High-level involvement in providing optimal performance and responsive support. Works to ensure optimal performance and reliability of systems while also providing mentoring and knowledge transfer to other Engineers and Technical Support Specialists. Acknowledges key role in responding to alerts and assisting Technical Support in analysis and resolution of issues
• Accepts responsibility for understanding firm Information Security Standards and applying those standards to ensure security of managed systems
• Effective communication skills, both written and oral. Strong interpersonal skills required to communicate with all other technology team members, members of the firm (users of systems), and clients. Must have customer service attitude and ability to work well with other groups.
• Superior understanding of the firm's goals and objectives, with demonstrated…