Senior Information Security Engineer – AI & Application Security
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for lists,
for prose. Do not repeat job title. Do not include Job ID etc. Remove boilerplate. Include only sections with real content.
We need to parse the posting.
Key content:
- Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you..." etc. This is about the firm. Could be "About the role" or maybe "About the firm". The instructions: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have "About the role" heading with description of role and firm.
- Job Description Summary: location list and description. Could be part of About the role.
- Job Description "What you would do:" list of duties.
- "What Is Expected": list of expected abilities/skills.
- "What We Offer": list of benefits.
- Salary range: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100." That's Pay.
- "What Is Required": list of requirements/qualifications.
We need to avoid duplication. Also remove application deadline, EEO, etc.
We need to preserve all substantive info.
Let's extract.
Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success."
That's about firm culture.
Job Description Summary: "Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients."
That's about role.
Then "What you would do:" bullet list (actually sentences separated by line breaks). We'll treat as list.
List items:
- Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standard
- Designs and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligations
- Evaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channels
- Conducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errors
- Serves as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build begins
- Builds and reports metrics on application and AI security posture in business terms relevant to legal operations
- Special projects and other duties as assigned
Next "What Is Expected": list of abilities.
List items:
- Ability to problem-solve
- Excellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference)
- Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environment
- Demonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriate
- Willingness to be flexible with time and adjust to a changing work environment
- Ability to build and maintain positive relationships, both internally and externally, while maintaining a client service orientation
- Ability to use sound judgment and discretion in dealing with highly confidential information
- Ability to take direction and accept supervision
- Demonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situations
- Ability to work effectively with co-workers in a team oriented collaborative environment
Next "What We Offer": list.
- Flexible working environment for work-life success
- Opportunity to participate in firm-sponsored volunteer events
- Wellness programming with personalized content and activities
- Professional environment and the opportunity to work with experts at the top of their fields
- Variety of health plan options, as well as dental, vision and 401(k) plans
- Generous paid time off
Pay: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100. Actual initial salary may be above or below the above-identified range and will be based on the relevant skills, training, experience, and other job-related factors, including the location where the position is filled, in all cases consistent with applicable law. This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan."
We can summarize as Pay section with that paragraph.
Requirements: "What Is Required": list.
- Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent years of experience
- Eight years or more of relevant experience in application security, secure software development, or information security, including at least three years focused on application security
- Strong understanding of the OWASP Top 10 and secure coding principles, and demonstrated familiarity with the OWASP Top 10 for LLMs
- Hands-on experience with application security testing, including threat modeling, secure code review, and static and dynamic testing, and managing findings through remediation
- Working knowledge of the software development lifecycle and experience embedding security into development and deployment pipelines in cloud or hybrid environments
- Proficiency in at least one programming or scripting language sufficient to review code and build testing tooling
- Experience designing or assessing API security controls, including authentication, authorization, and gateway policies
- Working knowledge of AI and LLM security risks, including prompt injection, data leakage, and cross-tenant isolation in retrieval-augmented architectures
- Experience assessing third-party and SaaS vendor security architectures
- Detailed technical knowledge of application, operating system, and network security fundamentals
- Thorough understanding of current security principles, techniques, and protocols.
- Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports
We could also include Skills maybe overlapping with Requirements. But we can keep Requirements as qualifications.
We need to decide sections: About the role (intro + summary), Responsibilities (What you would do), Requirements (What Is Required), Skills (maybe What Is Expected?), Benefits (What We Offer), Pay (salary). Could also have Qualifications but we already have Requirements.
We should not create empty sections. Ensure each heading has content.
We'll produce:
About the role
Intro paragraph + summary.
Responsibilities
- ... each duty
Requirements
- ... each requirement
Skills
- ... each expected ability
Benefits
- ... each benefit
Pay
Salary paragraph.
We should not include Schedule (no info). Avoid duplication.
Check for any boilerplate: we removed application deadline, EEO, etc.
Make sure we preserve all substantive info: we included intro, summary, responsibilities, expected abilities, benefits, pay, requirements.
Check we didn't miss any: The "What Is Expected" includes ability to problem-solve etc. We captured.
Check we captured "Special projects and other duties as assigned" yes.
Check we captured "Opportunity to participate in firm-sponsored volunteer events" yes.
Check we captured "Wellness programming with personalized content and activities" yes.
Check we captured "Professional environment and the opportunity to work with experts at the top of their fields" yes.
Check we captured "Variety of health plan options, as well as dental, vision and 401(k) plans" yes.
Check we captured "Generous paid time off" yes.
Check we captured salary paragraph.
Check we captured "This is an exempt role..." we included in Pay paragraph.
Check we captured "This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan." Yes.
Check we captured "Bachelor’s degree..." etc.
Check we captured "Eight years or more..." etc.
Check we captured "Strong understanding of the OWASP Top 10..." etc.
Check we captured "Hands-on experience with application security testing..." etc.
Check we captured "Working knowledge of the software development lifecycle..." etc.
Check we captured "Proficiency in at least one programming or scripting language..." etc.
Check we captured "Experience designing or assessing API security controls..." etc.
Check we captured "Working knowledge of AI and LLM security risks..." etc.
Check we captured "Experience assessing third-party and SaaS vendor security architectures" etc.
Check we captured "Detailed technical knowledge of application, operating system, and network security fundamentals" etc.
Check we captured "Thorough understanding of current security principles, techniques, and protocols." etc.
Check we captured "Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports" yes.
Now format.
We need to output only HTML fragment, no markdown fences.
Let's craft.
Be careful to escape any HTML special characters? The text includes ampersands (&) and maybe less-than/greater-than? Not many. We'll keep as is; they are safe.
We'll produce:
About the role
Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success. Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning
for prose. Do not repeat job title. Do not include Job ID etc. Remove boilerplate. Include only sections with real content. We need to parse the posting. Key content: - Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you..." etc. This is about the firm. Could be "About the role" or maybe "About the firm". The instructions: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have "About the role" heading with description of role and firm. - Job Description Summary: location list and description. Could be part of About the role. - Job Description "What you would do:" list of duties. - "What Is Expected": list of expected abilities/skills. - "What We Offer": list of benefits. - Salary range: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100." That's Pay. - "What Is Required": list of requirements/qualifications. We need to avoid duplication. Also remove application deadline, EEO, etc. We need to preserve all substantive info. Let's extract. Intro paragraph: "Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success." That's about firm culture. Job Description Summary: "Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients." That's about role. Then "What you would do:" bullet list (actually sentences separated by line breaks). We'll treat as list. List items: - Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standard - Designs and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligations - Evaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channels - Conducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errors - Serves as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build begins - Builds and reports metrics on application and AI security posture in business terms relevant to legal operations - Special projects and other duties as assigned Next "What Is Expected": list of abilities. List items: - Ability to problem-solve - Excellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference) - Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environment - Demonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriate - Willingness to be flexible with time and adjust to a changing work environment - Ability to build and maintain positive relationships, both internally and externally, while maintaining a client service orientation - Ability to use sound judgment and discretion in dealing with highly confidential information - Ability to take direction and accept supervision - Demonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situations - Ability to work effectively with co-workers in a team oriented collaborative environment Next "What We Offer": list. - Flexible working environment for work-life success - Opportunity to participate in firm-sponsored volunteer events - Wellness programming with personalized content and activities - Professional environment and the opportunity to work with experts at the top of their fields - Variety of health plan options, as well as dental, vision and 401(k) plans - Generous paid time off Pay: "The anticipated initial salary for someone who is hired into this position is $160,200 - $183,100. Actual initial salary may be above or below the above-identified range and will be based on the relevant skills, training, experience, and other job-related factors, including the location where the position is filled, in all cases consistent with applicable law. This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan." We can summarize as Pay section with that paragraph. Requirements: "What Is Required": list. - Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent years of experience - Eight years or more of relevant experience in application security, secure software development, or information security, including at least three years focused on application security - Strong understanding of the OWASP Top 10 and secure coding principles, and demonstrated familiarity with the OWASP Top 10 for LLMs - Hands-on experience with application security testing, including threat modeling, secure code review, and static and dynamic testing, and managing findings through remediation - Working knowledge of the software development lifecycle and experience embedding security into development and deployment pipelines in cloud or hybrid environments - Proficiency in at least one programming or scripting language sufficient to review code and build testing tooling - Experience designing or assessing API security controls, including authentication, authorization, and gateway policies - Working knowledge of AI and LLM security risks, including prompt injection, data leakage, and cross-tenant isolation in retrieval-augmented architectures - Experience assessing third-party and SaaS vendor security architectures - Detailed technical knowledge of application, operating system, and network security fundamentals - Thorough understanding of current security principles, techniques, and protocols. - Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports We could also include Skills maybe overlapping with Requirements. But we can keep Requirements as qualifications. We need to decide sections: About the role (intro + summary), Responsibilities (What you would do), Requirements (What Is Required), Skills (maybe What Is Expected?), Benefits (What We Offer), Pay (salary). Could also have Qualifications but we already have Requirements. We should not create empty sections. Ensure each heading has content. We'll produce:
About the role
Intro paragraph + summary.
Responsibilities
- ... each duty
Requirements
- ... each requirement
Skills
- ... each expected ability
Benefits
- ... each benefit
Pay
Salary paragraph.
We should not include Schedule (no info). Avoid duplication. Check for any boilerplate: we removed application deadline, EEO, etc. Make sure we preserve all substantive info: we included intro, summary, responsibilities, expected abilities, benefits, pay, requirements. Check we didn't miss any: The "What Is Expected" includes ability to problem-solve etc. We captured. Check we captured "Special projects and other duties as assigned" yes. Check we captured "Opportunity to participate in firm-sponsored volunteer events" yes. Check we captured "Wellness programming with personalized content and activities" yes. Check we captured "Professional environment and the opportunity to work with experts at the top of their fields" yes. Check we captured "Variety of health plan options, as well as dental, vision and 401(k) plans" yes. Check we captured "Generous paid time off" yes. Check we captured salary paragraph. Check we captured "This is an exempt role..." we included in Pay paragraph. Check we captured "This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan." Yes. Check we captured "Bachelor’s degree..." etc. Check we captured "Eight years or more..." etc. Check we captured "Strong understanding of the OWASP Top 10..." etc. Check we captured "Hands-on experience with application security testing..." etc. Check we captured "Working knowledge of the software development lifecycle..." etc. Check we captured "Proficiency in at least one programming or scripting language..." etc. Check we captured "Experience designing or assessing API security controls..." etc. Check we captured "Working knowledge of AI and LLM security risks..." etc. Check we captured "Experience assessing third-party and SaaS vendor security architectures" etc. Check we captured "Detailed technical knowledge of application, operating system, and network security fundamentals" etc. Check we captured "Thorough understanding of current security principles, techniques, and protocols." etc. Check we captured "Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reports" yes. Now format. We need to output only HTML fragment, no markdown fences. Let's craft. Be careful to escape any HTML special characters? The text includes ampersands (&) and maybe less-than/greater-than? Not many. We'll keep as is; they are safe. We'll produce:About the role
Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success. Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning