Senior Information Security Engineer
About the role
McDermott Will & Schulte is a leading global law firm with more than 1,700 lawyers and 1,400 business professionals. We celebrate excellence, collaboration, and community and have been recognized as a top workplace by USA Today, Fortune, The American Lawyer, Vault, and others. At McDermott, we invest in your future and accelerate your career, supporting you both in and outside of the office.
The Senior Information Security Engineer oversees the security of the Firm’s applications, networks, and systems. This position manages the security and integrity of the Firm’s information systems throughout their lifecycle, serves as a primary technical point of contact for other Firm departments, and works under minimal supervision.
Responsibilities
- Develop and manage security requirements of Firm assets and systems
- Create and maintain the Firm-wide security architecture
- Manage security requirements throughout the development and acquisition lifecycles for all assets
- Perform certification and accreditation prior to releasing software to production
- Develop and maintain software, application, network, hardware, systems, and mobile device inventories
- Define, implement, assess, and maintain controls necessary to protect software, applications, networks, hardware, systems, and mobile devices in accordance with security requirements
- Manage security configuration and changes for software, applications, networks, hardware, systems, and mobile devices
- Develop and maintain information asset inventories and establish and maintain controls necessary to protect information and critical assets
- Collaborate with individuals and teams outside of Information Security
- Mentor and support other team members in day-to-day activities
Requirements
- At least seven (7) years of related work experience
- Experience with or strong aptitude for AI-assisted development tools, LLMs, and agentic AI
- Knowledge of Microsoft Office Suite (Excel, Outlook, PowerPoint, and Word)
- Knowledge of information systems security risk frameworks and server architecture
- Knowledge of network concepts, host-based security settings/controls, and security technologies
- Knowledge of CI/CD concepts/tools and secure code development
- Strong organizational skills
- Strong mathematical and analytical skills
- Ability to work under tight deadlines and prioritize responsibilities
- Ability to handle and maintain confidential information
- Ability to work independently and under own direction and initiative
Benefits
Successful candidates will receive a competitive total rewards package with the opportunity to earn performance-based bonuses. Full-time positions are eligible for a discretionary bonus and a comprehensive benefits package supporting physical, emotional, mental, and financial health, with an emphasis on work-life balance.
Pay
Target hiring range: $121,000 - $203,000. Base pay is based on market location and may vary depending on job-related knowledge, skills, experience, and geographic location. Base pay is only one part of the total rewards package.
Physical Demands and Work Environment
- While performing the duties of this job, the employee is required to sit, use hands, reach with hands and arms, stoop, talk, and hear
- Employee must occasionally lift up to twenty (20) pounds
- Typical indoor office environment