Senior Information Security Engineer – AI & Application Security
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title. We must not include Job ID etc. Remove boilerplate. Preserve all substantive info.
We need to parse the posting.
Key sections:
- About the role: maybe the introductory paragraph: "Faegre Drinker is a firm designed for clients and designed for you..." etc. That's about the firm and culture. Could be "About the role" or maybe "About the firm". But we must use allowed headings. Use "About the role" for description of role and context.
- Responsibilities: "What you would do:" bullet list.
- Requirements: "What Is Required" bullet list.
- Qualifications: maybe "What Is Expected" includes abilities/soft skills. Could be Qualifications or Skills. The instruction: we have headings for Qualifications, Skills. We need to decide where to put content. "What Is Expected" includes abilities like problem solving, communication, etc. Those are more like Skills/Qualifications. Could treat as Skills.
- Benefits: "What We Offer" bullet list.
- Pay: salary range paragraph.
- Schedule: maybe not present; no explicit schedule info. There's flexible working environment but not schedule specifics. Should we include Schedule? Only if posting actually states them. It mentions flexible working environment but not schedule details. Might be considered schedule? The rule: never create Pay/Schedule/Benefits sections unless posting actually states them. It does state flexible working environment, but not explicit schedule like "full-time", "hybrid". Might be okay to include Schedule with flexible working environment? However they said "Prefer a few substantive sections over many thin ones." Could combine flexible working environment into Benefits or About the role. Since Benefits already includes wellness, volunteer, etc. Flexible working environment could be part of Benefits. So we may omit Schedule.
- Pay: we have salary range.
Thus sections: About the role, Responsibilities, Requirements, Skills (or Qualifications), Benefits, Pay.
We need to use for each heading. Use - for lists. Use
for prose.
We must not repeat job title. Must not include metadata like Job ID, requisition numbers. Remove boilerplate like EEO, E-Verify, application deadline, privacy policy, recruiter notice, etc. Also remove "Apply now if you are ready..." and "Application Deadline: October 23, 2026". Also remove "Faegre Drinker Biddle & Reath LLP participates in the federal government's E-Verify program..." etc. Also remove "Notice to Recruiters..." etc.
We must preserve all substantive information: that includes the description of role, responsibilities, expected abilities, offered benefits, salary range, requirements.
Let's extract substantive content.
Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success."
That's about the firm/culture. Could be About the role.
Job Description Summary: "Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients."
That's also role summary.
We can combine into About the role.
Responsibilities: bullet list under "What you would do:" each line starts with a verb.
List items:
- Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standard
- Designs and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligations
- Evaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channels
- Conducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errors
- Serves as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build begins
- Builds and reports metrics on application and AI security posture in business terms relevant to legal operations
- Special projects and other duties as assigned
What Is Expected: list of abilities (soft skills). We'll treat as Skills.
List:
- Ability to problem-solve
- Excellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference)
- Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environment
- Demonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriate
- Willingness to be flexible with time and adjust to a changing work environment
- Ability to build and maintain positive relationships, both internally and externally, while maintaining a client service orientation
- Ability to use sound judgment and discretion in dealing with highly confidential information
- Ability to take direction and accept supervision
- Demonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situations
- Ability to work effectively with co-workers in a team oriented collaborative environment
What We Offer: bullet list.
- Flexible working environment for work-life success
- Opportunity to participate in firm-sponsored volunteer events
- Wellness programming with personalized content and activities
- Professional environment and the opportunity to work with experts at the top of their fields
- Variety of health plan options, as well as dental, vision and 401(k) plans
- Generous paid time off
Pay: paragraph: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100. Actual initial salary may be above or below the above-identified range and will be based on the relevant skills, training, experience, and other job-related factors, including the location where the position is filled, in all cases consistent with applicable law. This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan."
We need to keep that.
Requirements: bullet list under "What Is Required".
List:
- Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent years of experience
- Eight years or more of relevant experience in application security, secure software development, or information security, including at least three years focused on application security
- Strong understanding of the OWASP Top 10 and secure coding principles, and demonstrated familiarity with the OWASP Top 10 for LLMs
- Hands-on experience with application security testing, including threat modeling, secure code review, and static and dynamic testing, and managing findings through remediation
- Working knowledge of the software development lifecycle and experience embedding security into development and deployment pipelines in cloud or hybrid environments
- Proficiency in at least one programming or scripting language sufficient to review code and build testing tooling
- Experience designing or assessing API security controls, including authentication, authorization, and gateway policies
- Working knowledge of AI and LLM security risks, including prompt injection, data leakage, and cross-tenant isolation in retrieval-augmented architectures
- Experience assessing third-party and SaaS vendor security architectures
- Detailed technical knowledge of application, operating system, and network security fundamentals
- Thorough understanding of current security principles, techniques, and protocols.
- Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports
Note: The last ability overlaps with skills but it's under requirements; we keep it.
Now we need to output HTML fragment with headings
and content.
We should not include any extra text outside HTML.
Structure:
About the role
... (combined intro and summary)
Responsibilities
- ...
...
Requirements
...
Skills
...
Benefits
...
Pay
...
We must not include Schedule.
Check that we didn't include any placeholder like "commensurate with experience". Not present.
We must ensure we didn't repeat job title. Not.
We must not include any boilerplate like EEO, E-Verify, etc. We removed.
Now craft the HTML.
Be careful to escape any HTML special characters? The text includes ampersands (&) and maybe less-than/greater-than? Not much. We have "AI & Application Security". The ampersand should be escaped as & in HTML. Also "AI & Application Security" appears in intro? Actually in the summary: "Senior Information Security Engineer – AI & Application Security". Need to escape &.
Also "AI & Application Security" appears elsewhere? Not.
Also "AI & Application Security" in responsibilities? Not.
Also "AI & Application Security" maybe not elsewhere.
Also "AI & Application Security" appears in "AI & Application Security". We'll escape.
Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "
- for lists. Use
for prose. We must not repeat job title. Must not include metadata like Job ID, requisition numbers. Remove boilerplate like EEO, E-Verify, application deadline, privacy policy, recruiter notice, etc. Also remove "Apply now if you are ready..." and "Application Deadline: October 23, 2026". Also remove "Faegre Drinker Biddle & Reath LLP participates in the federal government's E-Verify program..." etc. Also remove "Notice to Recruiters..." etc. We must preserve all substantive information: that includes the description of role, responsibilities, expected abilities, offered benefits, salary range, requirements. Let's extract substantive content. Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success." That's about the firm/culture. Could be About the role. Job Description Summary: "Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients." That's also role summary. We can combine into About the role. Responsibilities: bullet list under "What you would do:" each line starts with a verb. List items: - Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standard - Designs and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligations - Evaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channels - Conducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errors - Serves as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build begins - Builds and reports metrics on application and AI security posture in business terms relevant to legal operations - Special projects and other duties as assigned What Is Expected: list of abilities (soft skills). We'll treat as Skills. List: - Ability to problem-solve - Excellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference) - Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environment - Demonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriate - Willingness to be flexible with time and adjust to a changing work environment - Ability to build and maintain positive relationships, both internally and externally, while maintaining a client service orientation - Ability to use sound judgment and discretion in dealing with highly confidential information - Ability to take direction and accept supervision - Demonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situations - Ability to work effectively with co-workers in a team oriented collaborative environment What We Offer: bullet list. - Flexible working environment for work-life success - Opportunity to participate in firm-sponsored volunteer events - Wellness programming with personalized content and activities - Professional environment and the opportunity to work with experts at the top of their fields - Variety of health plan options, as well as dental, vision and 401(k) plans - Generous paid time off Pay: paragraph: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100. Actual initial salary may be above or below the above-identified range and will be based on the relevant skills, training, experience, and other job-related factors, including the location where the position is filled, in all cases consistent with applicable law. This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan." We need to keep that. Requirements: bullet list under "What Is Required". List: - Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent years of experience - Eight years or more of relevant experience in application security, secure software development, or information security, including at least three years focused on application security - Strong understanding of the OWASP Top 10 and secure coding principles, and demonstrated familiarity with the OWASP Top 10 for LLMs - Hands-on experience with application security testing, including threat modeling, secure code review, and static and dynamic testing, and managing findings through remediation - Working knowledge of the software development lifecycle and experience embedding security into development and deployment pipelines in cloud or hybrid environments - Proficiency in at least one programming or scripting language sufficient to review code and build testing tooling - Experience designing or assessing API security controls, including authentication, authorization, and gateway policies - Working knowledge of AI and LLM security risks, including prompt injection, data leakage, and cross-tenant isolation in retrieval-augmented architectures - Experience assessing third-party and SaaS vendor security architectures - Detailed technical knowledge of application, operating system, and network security fundamentals - Thorough understanding of current security principles, techniques, and protocols. - Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports Note: The last ability overlaps with skills but it's under requirements; we keep it. Now we need to output HTML fragment with headings
and content. We should not include any extra text outside HTML. Structure:
About the role
... (combined intro and summary)
Responsibilities
- ... ...
Requirements
- ...
Skills
- ...
Benefits
- ...
Pay
...
We must not include Schedule. Check that we didn't include any placeholder like "commensurate with experience". Not present. We must ensure we didn't repeat job title. Not. We must not include any boilerplate like EEO, E-Verify, etc. We removed. Now craft the HTML. Be careful to escape any HTML special characters? The text includes ampersands (&) and maybe less-than/greater-than? Not much. We have "AI & Application Security". The ampersand should be escaped as & in HTML. Also "AI & Application Security" appears in intro? Actually in the summary: "Senior Information Security Engineer – AI & Application Security". Need to escape &. Also "AI & Application Security" appears elsewhere? Not. Also "AI & Application Security" in responsibilities? Not. Also "AI & Application Security" maybe not elsewhere. Also "AI & Application Security" appears in "AI & Application Security". We'll escape. Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "AI & Application Security". Also "AI & Application Security" appears in "