Enterprise Security Engineer

About Latham & Watkins

Latham & Watkins is one of the world’s leading global law firms advising the businesses and institutions that drive the global economy. We are the market leaders in major financial and business centers around the world. Our investment in people, commitment to innovation, and focus on the future empower you to build an incredible career and thrive as an exceptional professional in a supportive culture.

If you aspire to be the best, and work with the best, this is where you belong.

The Enterprise Security Engineer is an integral part of Latham’s Global Security and Risk Management team. This role will be responsible for solving highly complex security and technology problems by designing, evaluating, and implementing security capabilities that reduce risk while enabling business outcomes. This role will be located in our Global Services Office, located in Downtown Los Angeles. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence.

Other key responsibilities include:

• Leading the end-to-end lifecycle to review and responding to information security challenges; assessing the current and/or proposed technical/security configuration; gathering and validating requirements and constraints; researching and comparing viable solutions; recommending the best option, calling out advantages and disadvantages; supporting implementation, validation, and tracking progress to completion, including operational handoff
• Performing secure design reviews, threat modeling, and control mapping for new initiatives and significant changes; identifying security gaps and proposing pragmatic mitigations aligned to standards and risk tolerance
• Partnering with infrastructure and application owners to plan and drive remediation for complex and high-impact findings, including prioritization, technical approach, and validation of fixes; ensuring timelines are met and risks are tracked to closure
• Developing and communicating clear, outcome-oriented security metrics and narratives for technical and non-technical stakeholders; translating complex issues into actionable recommendations
• Serving as a subject matter expert, mentoring analysts and specialists, and raising the overall capability of the security function through training, pairing, and knowledge sharing
• Protecting and maintaining any highly sensitive, confidential, privileged, financial, and/or proprietary information that Latham & Watkins retains

We’d love to hear from you if you:

• Display the ability to effectively assess situations, and act accordingly to achieve a specific goal
• Possess strong analytical skills needed to troubleshoot a variety of symptoms, diagnose problems, and test, recommend and implement solutions to technology problems
• Demonstrate creativity to use existing tools, find new tools, and draw upon available resources to solve problems

And have:

• A bachelor's degree or equivalent; sufficient Security and Technology experience may be considered in lieu of degree
• A willingness to obtain additional security-related degrees as recommended by the firm
• An active security certification from a recognized authority
• A minimum of eight (8) years of experience in information technology, including information security
• The ability to communicate technical, security and risk issues to non-technical staff
• Proficiency in Microsoft Windows and Linux operating systems
• Experience with Network and firewall configuration and management
• Skills in vulnerability assessment, incident response, and penetration testing
• Experience supporting mobile devices and hardens systems/applications
• Experience in utilizing SIEM, SOAR, EDR, and similar security tools
• Experience in conducting threat intelligence research
• Law office experience and Python/programming skills, preferably

Successful candidates will not only be provided with an outstanding career opportunity and welcoming environment, but will also be provided with a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible…