Network Security Engineer
Core
Administer and tune FortiGate firewalls, manage identity and access controls, and lead data loss prevention programs for a law firm's hybrid Microsoft environment.
Role type
Senior IC network security engineer
Builds
Production security controls, incident response capabilities, and compliance frameworks
Domain
Legal services / Network security
Required skills
FortiGate firewall administration, endpoint detection and response, Microsoft 365 security administration, Microsoft Entra ID, Active Directory, Intune, vulnerability management, security monitoring, risk assessment, incident response, data loss prevention, NIST CSF, CIS Controls, ISO 27001
Preferred skills
Law firm or professional services experience, AI governance experience, CISSP, CISM
Technologies
FortiGate, CrowdStrike Falcon, Microsoft Defender, Microsoft 365, Microsoft Entra ID, Active Directory, Intune, Microsoft Purview, Office 365
Responsibilities
Administer and tune FortiGate firewalls, maintain network segmentation, remote access, and wireless security. Manage CrowdStrike and Microsoft Defender, along with device compliance and encryption in Intune. Maintain identity and access controls in Entra ID and Active Directory, including MFA, conditional access, and privileged accounts. Manage cloud email security, including filtering rules, phishing defenses, and SPF, DKIM, and DMARC records. Lead our Microsoft Purview data loss prevention and classification program, including sensitivity labels and policy tuning. Investigate security events, handle containment and recovery, and contribute to incident response planning and tabletop exercises. Manage vulnerability remediation and patching across servers, endpoints, and network devices. Prepare technical responses to client security questionnaires, audits, and SHIELD Act obligations.
Seniority
Senior, hands-on IC