Note: The job is a remote job and is open to candidates in USA. K&L Gates LLP is a global law firm seeking a Senior Security Engineer to strengthen security capabilities across cloud, on-premises, and hybrid environments. The role focuses on security engineering, DevSecOps, automation, detection engineering, incident response, AI-driven security tools, and technical leadership.
Responsibilities
- Designing, implementing, and supporting DevSecOps practices
- Designing, implementing, and enhancing enterprise security solutions across cloud, on-premises, and hybrid environments
- Developing scalable automation and orchestration capabilities to improve security operations and reduce manual effort
- Creating automation solutions utilizing PowerShell, Python, REST APIs, Microsoft Graph, and cloud-native technologies
- Implementing and optimize Azure security controls, identity protections, encryption, and data security capabilities
- Integrating security controls throughout the technology lifecycle in partnership with infrastructure, cloud, and application teams
- Developing and maintaining security detections, analytics, correlation rules, and threat monitoring capabilities
- Enhancing security visibility through improved telemetry, logging strategies, and attack surface monitoring
- Applying threat intelligence and industry frameworks, including MITRE ATT&CK, to strengthen detection and response capabilities
- Leading or supporting complex investigations, threat hunting activities, and major incident response efforts
- Conducting security assessments, control validation activities, and supporting penetration testing initiatives
- Evaluating emerging security and AI technologies and recommending solutions that improve security maturity and operational effectiveness
- Leading technical initiatives, mentoring security engineers, and providing architecture guidance, standards, and documentation
Skills
- • Demonstrated experience designing, implementing, and maturing enterprise security, cloud security, and DevSecOps capabilities
- • Possess Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related discipline, OR equivalent experience
- • Understand Zero Trust principles, authentication, encryption, identity security, and data protection concepts
- • Possess knowledge of SIEM, EDR/XDR, identity security, cloud security, and enterprise security monitoring technologies
- • Possess solid knowledge of enterprise networking, operating systems, network security, and hybrid cloud architectures
- • Possess relevant certifications such as CISSP, CCSP, GIAC (GCIA, GCIH, GCFA, GPEN, GWEB), Microsoft Security, Azure (AZ-500, SC-200, SC-100, AZ-305), Splunk, or CrowdStrike
- • Demonstrate proficiency in automation and scripting using PowerShell, Python, REST APIs, Microsoft Graph, or similar technologies
- • Have 7+ years of progressive experience in cybersecurity, security engineering, cloud security, or related technology fields
- • Work experience with Microsoft security and cloud platforms such as Microsoft Defender, Sentinel, Entra ID, Purview, Azure Security services, or equivalent technologies
- • Develop and refine security detections, analytics, and correlation rules to enhance system monitoring and threat response capabilities
- • Demonstrate expertise in threat detection, incident response, threat hunting, and cyber threat actor tactics, techniques, and procedures (TTPs)
- • Demonstrate experience supporting or working within a Security Operations Center (SOC) environment
- • Demonstrate experience designing, implementing, and improving enterprise security capabilities
Company Overview
Company H1B Sponsorship