Enterprise Security Engineer at Latham & Watkins LLP

Job description

Latham & Watkins is one of the world’s leading global law firms advising the businesses and institutions that drive the global economy. We are the market leaders in major financial and business centers around the world. Our investment in people, commitment to innovation, and focus on the future empower you to build an incredible career and thrive as an exceptional professional in a supportive culture. If you aspire to be the best, and work with the best, this is where you belong. The Enterprise Security Engineer is an integral part of Latham’s Global Security and Risk Management team. This role will be responsible for solving highly complex security and technology problems by designing, evaluating, and implementing security capabilities that reduce risk while enabling business outcomes. This role will be located in our Global Services Office, located in Downtown Los Angeles. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence. Other key responsibilities include: • Leading the end-to-end lifecycle to review and responding to information security challenges; assessing the current and/or proposed technical/security configuration; gathering and validating requirements and constraints; researching and comparing viable solutions; recommending the best option, calling out advantages and disadvantages; supporting implementation, validation, and tracking progress to completion, including operational handoff • Performing secure design reviews, threat modeling, and control mapping for new initiatives and significant changes; identifying security gaps and proposing pragmatic mitigations aligned to standards and risk tolerance • Partnering with infrastructure and application owners to plan and drive remediation for complex and high-impact findings, including prioritization, technical approach, and validation of fixes; ensuring timelines are met and risks are tracked to closure • Developing and communicating clear, outcome-oriented security metrics and narratives for technical and non-technical stakeholders; translating complex issues into actionable recommendations • Serving as a subject matter expert, mentoring analysts and specialists, and raising the overall capability of the security function through training, pairing, and knowledge sharing • Protecting and maintaining any highly sensitive, confidential, privileged, financial, and/or proprietary information that Latham & Watkins retains We’d love to hear from you if you: • Display the ability to effectively assess situations, and act accordingly to achieve a specific goal • Possess strong analytical skills needed to troubleshoot a variety of symptoms, diagnose problems, and test, recommend and implement solutions to technology problems • Demonstrate creativity to use existing tools, find new tools, and draw upon available resources to solve problems And have: • A bachelor's degree or equivalent; sufficient Security and Technology experience may be considered in lieu of degree • A willingness to obtain additional security-related degrees as recommended by the firm • An active security certification from a recognized authority • A minimum of eight (8) years of experience in information technology, including information security • The ability to communicate technical, security and risk issues to non-technical staff • Proficiency in Microsoft Windows and Linux operating systems • Experience with Network and firewall configuration and management • Skills in vulnerability assessment, incident response, and penetration testing • Experience supporting mobile devices and hardens systems/applications • Experience in utilizing SIEM, SOAR, EDR, and similar security tools • Experience in conducting threat intelligence research • Law office experience and Python/programming skills, preferably Successful candidates will not only be provided with an outstanding career opportunity and welcoming environment, but will also be provided with a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible employees can participate in Latham’s comprehensive benefit program which includes: • Healthcare, life and disability insurance • A generous 401k plan • At least 11 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure • Well-being programs (e.g. mental health services, mindfulness and resiliency, medical resources, well-being events, and more) • Professional development programs • Employee discounts • Affinity groups, networks, and coalitions for lawyers and staff Latham & Watkins is an equal opportunity employer. The Firm prohibits discrimination against any employee or applicant for employment on the basis of race (including, but not limited to, hair texture and protective hairstyles), color, religion, sex, age, national origin, sexual orientation, gender identity, veteran status (including veterans of the Vietnam era), gender expression, marital status, or any other characteristic or condition protected by applicable statute. Latham & Watkins LLP will consider qualified applicants with criminal histories in a manner consistent with the City of Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO). Please click the link below to review the Ordinance. Please click here to review your rights under U.S. employment laws. #MidSenior #LI-LZ1 #LI-Hybrid USD $165,000.00 - USD $180,000.00 /Yr.

Requirements

Must-haves

Performing secure design reviews, threat modeling, and control mapping for new initiatives and significant changes; identifying security gaps and proposing pragmatic mitigations aligned to standards and risk tolerance
Developing and communicating clear, outcome-oriented security metrics and narratives for technical and non-technical stakeholders; translating complex issues into actionable recommendations
Serving as a subject matter expert, mentoring analysts and specialists, and raising the overall capability of the security function through training, pairing, and knowledge sharing
Protecting and maintaining any highly sensitive, confidential, privileged, financial, and/or proprietary information that Latham & Watkins retains
We’d love to hear from you if you:
Display the ability to effectively assess situations, and act accordingly to achieve a specific goal
Possess strong analytical skills needed to troubleshoot a variety of symptoms, diagnose problems, and test, recommend and implement solutions to technology problems
Demonstrate creativity to use existing tools, find new tools, and draw upon available resources to solve problems
A bachelor's degree or equivalent; sufficient Security and Technology experience may be considered in lieu of degree
A willingness to obtain additional security-related degrees as recommended by the firm
An active security certification from a recognized authority
A minimum of eight (8) years of experience in information technology, including information security
The ability to communicate technical, security and risk issues to non-technical staff
Proficiency in Microsoft Windows and Linux operating systems
Experience with Network and firewall configuration and management
Skills in vulnerability assessment, incident response, and penetration testing
Experience supporting mobile devices and hardens systems/applications
Experience in utilizing SIEM, SOAR, EDR, and similar security tools
Experience in conducting threat intelligence research
Law office experience and Python/programming skills, preferably
Healthcare, life and disability insurance
At least 11 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure
Well-being programs (e.g. mental health services, mindfulness and resiliency, medical resources, well-being events, and more)
Professional development programs

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

401k

Pto

Professional Development