Lead Engineer: Information Security

Overview

Mayer Brown is an international law firm positioned to represent the world’s major corporations, funds, and financial institutions in their most important and complex transactions and disputes. We are recognized by our clients as strategic partners with deep commercial instincts and a commitment to creatively anticipating their needs and delivering excellence in everything we do.

We are a collegial, collaborative firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support, and development they need to grow, thrive, and realize their greatest potential all while supporting the Firm’s client service principles of excellence, strategic partnership, commercial instinct, integrated strengths, innovation, and collaboration across our international firm.

If you thrive in a collaborative environment that values exceptional client service, initiative, professionalism, responsiveness, and adaptability, we invite you to consider joining our Information Technology department in our Chicago, Los Angeles, or Salt Lake City office as a Lead Engineer:
Information Security.

The Lead Engineer:
Information Security implements, integrates, and maintains security technologies and controls across the Firm's cloud, data, identity, and enterprise platforms. This role provides hands‑on technical leadership for strategic projects and initiatives on the security roadmap, executing designs and standards defined by security architects and ensuring solutions are delivered securely, reliably, and at scale.

The role partners closely with security architects, engineers, and other IT teams to apply and support best practices for security engineering, cloud and platform hardening, identity and access, incident response, data loss prevention, and user experience — supporting the Assistant Director:
Global Information Security in delivering a scalable, resilient security program.

Essential Functions:

Security Engineering & Implementation

• Implement, integrate, and maintain security technologies and controls that support the Firm's security architecture and roadmap
• Provide hands‑on technical leadership for strategic IT and security projects and initiatives
• Operationalize security architectures, standards, and reference patterns defined by security architects
• Ensure consistent implementation and configuration of security controls across systems and platforms
• Collaborate with other engineers and IT teams to apply best practices for security, server hardening, change management, account management, and user experience

Cloud, Platform & Systems Security

• Implement and maintain security controls across cloud and enterprise platforms, including Azure, Microsoft 365, Teams/O365, and iManage Cloud
• Configure and tune security tooling to align with defined design patterns and business requirements
• Ensure monitoring, alerting, and detection capabilities are implemented in accordance with business needs
• Collaborate with IT teams to ensure security standards are applied when implementing or upgrading firm technology
• Contribute to Business Continuity and Disaster Recovery planning and execution from a security engineering perspective

Identity, Access & Data Protection

• Implement and maintain identity, authentication, and authorization controls for internal and business‑to‑business integrations
• Configure and support privileged access, conditional access, and least‑privilege controls in coordination with Infrastructure and Access Management team
• Control access to the Firm's information systems and related security configurations
• Implement, tune, and operate Data Loss Prevention (DLP) systems and processes
• Analyze data collected from DLP systems to ensure compliance with Firm policies and support policy tuning
• Assist in defining DLP policies and workflows to protect firm and client data, and develop metrics for measuring effectiveness of the DLP solution
• Implement controls to prevent or minimize unauthorized or undesirable use of IT facilities and firm data

Incident Response & Security Monitoring

• Detect, triage, and respond to information security incidents within the Mayer Brown environment
• De…