Senior Information Security Engineer – AI & Application Security

About the role

Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Philadelphia, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients.

Responsibilities

• Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standard
• Designs and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligations
• Evaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channels
• Conducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errors
• Serves as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build begins
• Builds and reports metrics on application and AI security posture in business terms relevant to legal operations
• Special projects and other duties as assigned

Skills

• Ability to problem-solve
• Excellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference)
• Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environment
• Demonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriate
• Willingness to be flexible with time and adjust to a changing work environment
• Ability to build and maintain positive relationships, both internally and externally, while maintaining a client service orientation
• Ability to use sound judgment and discretion in dealing with highly confidential information
• Ability to take direction and accept supervision
• Demonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situations
• Ability to work effectively with co-workers in a team oriented collaborative environment

Requirements

• Bachelor’s degree in computer science, cybersecurity, or a