Network Security Engineer
Job Location:
Rochester, NH - USA
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
Job Title:Network Security Engineer
Department: Information Technology
Location: Rochester NY
Classification: Exempt
Reports To: Director of Information Technology
Please note: Candidates must be authorized to work in the United States and able to work onsite in the Rochester NY office. Sponsorship is not available for this position.
Company Overview:
Woods Oviatt Gilman LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. With a team of highly skilled and experienced attorneys we strive to deliver comprehensive and effective solutions to meet the diverse needs of our clients. Our headquarters is in Rochester NY with additional offices in Albany and Buffalo NY.
We foster a collaborative and inclusive work environment where every team member is valued and respected. We encourage open communication teamwork and professional growth. Our firm promotes a healthy work-life balance and supports the well-being of our employees.
Position Summary:
The Network Security Engineer is a hands-on technical role responsible for implementing and maintaining the firms security controls across a hybrid Microsoft environment including FortiGate firewalls endpoint protection Microsoft 365 and Intune data protection and a co-managed monitoring service. Working under the direction of the Director of Information Technology who sets security policy and priorities the Engineer provides the technical assessment recommendations and documentation behind those decisions and exercises the judgment and discretion required to protect privileged client information.
Duties and Responsibilities:
- Administer and tune FortiGate firewalls and maintain segmentation remote access and wireless security
- Administer CrowdStrike and Microsoft Defender and manage device compliance and encryption in Intune
- Maintain identity and access controls in Entra ID and Active Directory including MFA conditional access and privileged accounts
- Maintain cloud email security including filtering rules phishing defenses and SPF DKIM and DMARC records
- Lead the firms data loss prevention and data classification program in Microsoft Purview including sensitivity labels and policy tuning
- Support retention eDiscovery and information barrier requirements in coordination with firm counsel
- Assess AI platforms and cloud services before adoption and implement the firms AI acceptable use controls
- Serve as daily technical contact for the firms managed monitoring service triaging and validating alerts
- Investigate security events perform containment and recovery and contribute to incident response planning and tabletop exercises
- Perform vulnerability and patch management across servers endpoints and network devices
- Conduct vendor and application security reviews and implement controls supporting NIST CSF CIS Controls or ISO 27001
- Prepare technical responses for client security questionnaires audits and SHIELD Act obligations
- Administer security awareness and phishing simulation program
Technical Skills:
- FortiGate firewall administration including policy VPN and intrusion prevention
- Endpoint detection and response ideally CrowdStrike Falcon and Microsoft Defender
- Microsoft 365 security administration email protection and SPF DKIM and DMARC
- Microsoft Entra ID Active Directory and Intune in a hybrid configuration
- Microsoft Purview sensitivity labels data classification and data loss prevention
- Networking fundamentals vulnerability management and security monitoring
Preferred
- Law firm or professional services experience including client security audits
- AI governance experience including acceptable use controls or AI risk assessment
- CISSP CISM or an equivalent industry-recognized certification
Knowledge Skills and Abilities:
- Ability to assess and prioritize risk against practical business needs
- Ability to work independently while escalating decisions and exceptions appropriately
- Skill in explaining security risks clearly to attorneys staff and IT colleagues
- Discretion and sound judgment in handling confidential and privileged information
Education and Experience:
- Bachelors degree in Cybersecurity Information Technology or a related field or equivalent
- Five or more years of hands-on network or information security experience
- Experience implementing controls in support of a security framework with audit exposure
Physical Requirements:
Ability to work in server rooms and network closets including bending reaching and lifting up to 50 pounds and availability for occasional after-hours maintenance and incident response. Reasonable accommodations may be made for qualified individuals with disabilities.
Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities duties or responsibilities that are required of the employee for this job. This is a snapshot of the core functions and responsibilities. All inquiries will be handled with the utmost confidentiality. The compensation range for this position is $100000-$130000 annually representing our good faith and reasonable estimate of the potential compensation at the time of posting. Actual compensation will be determined based on various factors including the candidates qualifications experience skill set and office location.
Woods Oviatt Gilman LLP is an Equal Opportunity Employer. We value an open mind dedication to work and a collaborative spirit. We hire based on these qualities a jobs requirements our business needs and an applicants qualifications. We do not tolerate discrimination or harassment of any kindin the hiring process or in the workplace. We comply with the ADA and consider reasonable accommodation measures that may be necessary for eligible applicants/employees to perform essential functions. We participate in E-Verify. We will provide the federal government with employees Form I-9 information to confirm authorization to work in the U.S. We will only use E-Verify once an employee has accepted a job offer and completed Form I-9.
Required Experience:
IC
About Company
We’ve been part of Western New York since 1852 and through our private and corporate clients; our partners, associates and staff; and the local organizations we help support, this community is truly part of our firm. Now, more than 160 years later, Woods Oviatt Gilman has a national a ... View more
