Senior Enterprise Security And Monitoring Engineer

Senior Enterprise Security And Monitoring Engineer

This opportunity is with a global law firm, committed to delivering high-quality solutions and maintaining a secure technological infrastructure. The company is recognized for its strong presence and dedication to excellence in its field.

Job Description

Implements, manages, and optimizes enterprise security and monitoring tools and systems, such as antivirus, endpoint detection and response (EDR), identity threat detection and response (ITDR), and file integrity monitoring platforms.

Implements, manages, and enhances privileged access management (PAM) systems.

Monitors, detects, and responds to security threats, leading incident response efforts, from detection to resolution and post-incident reviews.

Performs regular audits and assessments of server security and application, system, and data access controls, vulnerability management, and implements security best practices and recommendations, to ensure compliance with security policies and standards, and to protect the firm's data and assets.

Plans and implements server and application security updates and patches to remediate vulnerabilities in collaboration with IT, compliance, and vulnerability management teams.

Manages security measures, such as server, application, and unstructured file system access controls, to protect against unauthorized access, data loss, and other security threats against the firm's on-prem infrastructure and cloud-based platforms.

Monitors, supports, and troubleshoots servers, appliances, and applications.

Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasks.

Secures and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governance.

Develops and maintains PowerShell scripts (or equivalent scripting languages) to automate administrative, security-related, and routine tasks.

Leverages APIs for integration, automation, and enhancements of monitoring and management across systems and tools.

Works cross-functionally with technology teams, including, but not limited to, information security, compliance, networking, and application teams.

Proactively identifies opportunities for automation to improve system reliability and reduce manual effort.

Researches and evaluates new security and monitoring technologies and solutions and recommends improvements and enhancements to the existing systems and processes.

Stays updated with emerging trends and best practices in security and monitoring solutions, server and endpoint protection, identity protection and governance, data security, cloud security, and AI model infrastructure security.

MPI does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital status, or based on an individual's status in any group or class protected by applicable federal, state or local law. MPI encourages applications from minorities, women, the disabled, protected veterans and all other qualified applicants.

The Successful Applicant

A successful Senior Enterprise Security and Monitoring Engineer should have:

• 10+ years of professional experience managing medium to large enterprise Microsoft Windows environments
• MUST be coming from a legal environment
• Strong working knowledge of cloud platforms like Microsoft Azure.
• Strong knowledge and expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platforms
• Strong background in security operations, endpoint security, and incident response
• Hands-on experience managing a Privileged Access Management system
• Strong knowledge of public key infrastructure (PKI) and cryptography
• Hands-on experience with Azure/Entra ID cloud security, including, but not limited to conditional access, Defender for Endpoint, Defender for Cloud, and Defender for Identity
• Proven expertise in Active Directory Domain Services and Entra ID management
• Advanced understanding of authentication and authorization flows
• Deep understanding of identity and access management and role-based access control concepts
• Good working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePoint
• Strong working knowledge with basic networking concepts, including TCP/IP, DNS, DHCP
• Experience managing secure file transfer tools

What's on Offer

Opportunities to work within a large organization in the professional services industry.

A collaborative environment focused on innovation and security excellence.

Professional growth opportunities within the technology department.

If you are passionate about enterprise security and want to contribute to a leading organization in New York, we encourage you to apply today!