INFORMATION SECURITY ENGINEER

McCarter & English LLP is seeking an Information Security Engineer who will be based in our Newark, NJ office. The salary for this hybrid position is $120,00 to $150,000 annually. If you have the appropriate experience, we invite you to consider joining our team. Candidates who receive an offer of employment will be processed through a background check which will be an individualized assessment based on the applicant’s or employee’s specific record and the duties and requirements of the specific job.

Reports to: Director of Information Security, Data Privacy & Information Governance

Schedule: Staggered work schedule, generally 12:00 PM to 8:00 PM ET, with flexibility based on operational needs.

The Information Security Engineer is responsible for maintaining and supporting the firm's cybersecurity tools, systems, and operations. This hands-on technical role ensures alignment with established policies, procedures, and security objectives by assisting in the implementation, configuration, and monitoring of security technologies. The Information Security Engineer will work closely with IT and security teams to identify and respond to threats, remediate vulnerabilities, and uphold the security of firm assets and data.

This position will also have a strong focus on proactive threat intelligence research, threat hunting, and security investigations, including identifying emerging threats, evaluating potential exposure to the firm and its clients, and recommending appropriate defensive actions.

Responsibilities

• Monitor and support daily security operations, including the analysis, maintenance, and optimization of cybersecurity tools and infrastructure.
• Investigate, respond to, and document security incidents, including root cause analysis, corrective actions, and recommendations to improve security controls.
• Conduct proactive threat intelligence research on emerging threats, threat actors, and tactics, techniques, and procedures (TTPs) relevant to the firm and the legal industry.
• Perform threat hunting and analyze security telemetry across endpoint, network, identity, email, and cloud platforms to identify suspicious activity, indicators of compromise, and potential security exposures.
• Manage and contribute to cybersecurity projects, including security tool deployments, configuration enhancements, and remediation efforts.
• Support the firm's vulnerability management program, including identifying, prioritizing, and coordinating remediation of security vulnerabilities.
• Maintain and enhance security technologies, including SIEM, EDR, firewalls, identity protection, vulnerability management, and email security platforms.
• Collaborate with IT teams to implement security best practices, strengthen technical controls, and address identified security risks.
• Support security assessments, client security questionnaires, compliance initiatives, and audit-related remediation efforts.
• Contribute to security awareness initiatives in partnership with the Information Governance team.
• Coordinate with external security providers and incident response partners on investigations, escalations, and security initiatives.
• Develop and maintain security documentation, policies, procedures, and operational runbooks to improve security operations and incident response capabilities.
• Provide extended operational coverage through a staggered work schedule to support security monitoring, investigations, and incident response beyond traditional business hours.

Experience and Requirements

• Bachelor's degree in information systems, cybersecurity, or a related field, or equivalent experience.
• Minimum of 4 years of experience in information security, security engineering, security operations, or a related IT security role.
• CISSP or similar certification required; additional certifications such as CISM, GCIH, GCIA, GCFA, or other GIAC certifications are a plus.
• Hands-on experience with security technologies, including SIEM, EDR, vulnerability management, firewalls, identity protection, and email security platforms.
• Demonstrated experience investigating security incidents, analyzing security events, and recommending appropriate response and remediation actions.
• Experience with threat intelligence research, threat hunting, and open-source intelligence (OSINT) techniques.
• Familiarity with MITRE ATT&CK, threat actor tactics, techniques, and procedures (TTPs), and common attack methodologies.
• Understanding of information security frameworks such as NIST CSF or ISO 27001, as well as relevant regulatory and compliance requirements.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to work independently and manage multiple priorities.
• Effective written and verbal communication skills, including the ability to document investigations, communicate findings, and provide recommendations.
• Ability to collaborate effectively with internal teams and external security partners.
• Willingness to work a staggered schedule to provide extended security operations coverage through evening hours.

Note: While the list of essential duties is intended to be as inclusive as possible, there may be other duties, which are essential to particular positions within the class.

Benefits (if FTE requirements met):

• Firm-Paid: Basic life and accidental death and dismemberment (AD&D) insurance and short-term (ST) and long-term (LT) disability benefits.
• Health & Wellness: Comprehensive medical/prescription drug coverage (the Firm pays a share of the cost), including a high deductible health plan with an annual Firm health savings account (HSA) contribution.
• Employee-Paid Voluntary Benefits: Dental and vision coverage, supplemental health plans (accident, cancer and critical illness), flexible spending accounts, optional life and AD&D insurance (supplemental employee, spouse and child) and supplemental STD coverage.
• Retirement: 401(k) plan offering three types of contributions: pre-tax, Roth and after-tax contributions.
• Time Off: Paid Time Off (PTO), paid holidays, and leaves of absence to support work-life balance (e.g. parental leave)

Additional Benefits:

• Free and confidential employee assistance program (EAP) and behavioral health services program
• Firm-paid back-up child/elder care, academic support and pet care program
• Tax-advantaged college savings 529 Plan
• Employee discounts through Working Advantage

Other Compensation:

• Eligibility for discretionary bonus.

McCarter & English, LLP is an Equal Opportunity Employer