- Company Name
- Arnold & Porter
- Job Title
- Information Security Engineer
- Job Description
-
Job Title: Information Security Engineer
Role Summary: Technical security professional responsible for security operations, engineering, and architecture. Ensures overall security posture, participates in day‑to‑day security operations, incident response, and contributes to enterprise IT objectives and client service delivery.
Expectations: Execute security monitoring, vulnerability management, and incident response across the firm’s IT and application infrastructure. Maintain and manage security toolsets and support third‑party risk management, security awareness, compliance, and on‑call duties. Provide expert guidance on security requirements for networks, applications, and cloud environments.
Key Responsibilities:
- Analyze security logs and incidents using EDR, SIEM, and log aggregation.
- Monitor vulnerability management program to mitigate IO hygiene risk.
- Manage application control, EDR/AV, email security, attack simulation, threat intelligence, and AI security tools.
- Support incident response, investigation, and remediation.
- Validate compliance with policies, standards, and regulations.
- Research emerging vulnerabilities and cybersecurity trends.
- Report IT security events, metrics, and remediation progress.
- Assist third‑party risk and security awareness training.
- Participate in Change Advisory Board (CAB) reviews.
- Develop and update security policies, standards, and procedures.
Required Skills:
- Windows, Unix/Linux, and Active Directory proficiency.
- Core networking protocols (TCP/IP, UDP, DNS, DHCP, HTTP/HTTPS, routing).
- Security engineering, system and network security, authentication, cryptography, application security, and cloud security knowledge.
- Ability to leverage AI tools for security tasks.
- Strong written and oral communication, report writing, and presentation skills.
- Remote collaboration capability and professional judgment.
Required Education & Certifications:
- Bachelor’s degree in Information Technology, Computer Science, or related field preferred.
- Equivalent experience considered.
- Minimum 3 years experience in Information Security or related IT field with secondary security responsibilities.
Washington district of columbia, United states
On site
Junior
05-02-2026