[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. Seyfarth Shaw LLP is a legal services firm that provides advisory, litigation, and transactional services. The Security Engineer – Application Security & Technology Risk will assess and protect the Firm's technology environment by evaluating applications, SaaS platforms, integrations, and other technologies for security risks. The role will document findings, recommend risk-based remediation, and support security operations and initiatives.

Responsibilities

• Perform technical security assessments of software applications, SaaS platforms, browser extensions, integrations, AI-enabled technologies, and other technologies proposed for use within the Firm
• Evaluate application architecture, permissions, data access, administrative controls, authentication methods, APIs, OAuth integrations, third-party dependencies, logging capabilities, and security configuration
• Assess how compromised or malicious applications could be leveraged as an attack vector, including credential theft, data exposure, persistence, privilege escalation, lateral movement, command and control, and software supply-chain compromise
• Review vendor and application security documentation, vulnerability information, threat intelligence, software dependencies, and publicly available security research to identify potential risks
• Evaluate authentication and authorization configurations including SSO, SAML, OAuth/OIDC, MFA, Microsoft Entra ID integrations, Conditional Access policies, service principals, application registrations, API permissions, and privileged access requirements
• Work with infrastructure, endpoint, cloud, identity, networking, and application teams to identify security design or configuration gaps and recommend practical remediation or compensating controls
• Review existing deployed applications to determine business need, usage, software versions, support status, known vulnerabilities, available updates, and potential security exposure
• Assist with application inventory and software lifecycle initiatives designed to identify unnecessary, obsolete, vulnerable, or unauthorized applications within the environment
• Validate approved application deployments to confirm that software, security controls, permissions, integrations, and configurations were implemented according to approved requirements
• Use vulnerability management, endpoint security, SIEM, identity, network, asset discovery, and other security telemetry to understand application behavior and identify potential security concerns
• Support Security Operations with threat hunting, security investigations, incident response, and other operational security activities as needed
• Clearly document findings, risk, technical impact, and recommended controls for both technical and non-technical audiences
• Exercise independent judgment, curiosity, and initiative when investigating unfamiliar technologies and security risks

Skills

• At least three years of experience in cybersecurity, security engineering, application security, vulnerability management, penetration testing, security operations, or a related technical information technology role
• Strong understanding of common vulnerabilities, attack techniques, and the ways attackers compromise applications, endpoints, identities, cloud services, and enterprise environments
• Strong understanding of software supply-chain risk, including compromised software updates, malicious dependencies, third-party libraries, browser extensions, package repositories, software signing, and vendor compromise
• Familiarity with offensive security and penetration testing methodologies and the ability to apply an attacker mindset when evaluating new technologies
• Experience evaluating applications or SaaS platforms from a security perspective, including permissions, architecture, integrations, authentication, authorization, data access, and administrative controls
• Working knowledge of modern identity and authentication technologies including SSO, SAML, OAuth 2.0, OpenID Connect, MFA, Microsoft Entra ID, enterprise application registrations, and Conditional Access
• Understanding of Windows and cloud security concepts, endpoint security controls, networking, APIs, and common enterprise application deployment models
• Experience working with security technologies such as vulnerability scanners, endpoint detection and response platforms, SIEM platforms, identity security tools, network security platforms, or application security testing tools
• Ability to research unfamiliar technologies, understand how they operate, identify meaningful security concerns, and distinguish theoretical risk from realistic enterprise risk
• Strong analytical and troubleshooting skills with attention to technical detail
• Ability to communicate security findings clearly and work collaboratively with technical teams, application owners, vendors, and business stakeholders
• A strong desire to continuously learn about emerging technologies, vulnerabilities, attack techniques, and changes in the cyber threat landscape
• Familiarity with tools such as Qualys, CrowdStrike Falcon, Microsoft Sentinel, Microsoft Entra ID, Burp Suite, or comparable security platforms is preferred
• Scripting, API, or automation experience with PowerShell, Python, or similar technologies is preferred

Benefits

• Annual merit increase
• Bonus pay
• Paid time off
• Medical insurance
• Dental insurance
• Vision insurance
• 401(k)
• Remote work

Company Overview

Company H1B Sponsorship