Job Title: Network Security Engineer Department: Information Technology
Reports To: Director of Information Technology
Woods Oviatt Gilman, LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. The Network Security Engineer is a hands-on technical role responsible for implementing and maintaining the firm’s security controls across a hybrid Microsoft environment, including FortiGate firewalls, endpoint protection, Microsoft 365 and Intune, data protection, and a co-managed monitoring service. Working under the direction of the Director of Information Technology, who sets security policy and priorities, the Engineer provides the technical assessment, recommendations, and documentation behind those decisions, and exercises the judgment and discretion required to protect privileged client information.
Administer and tune FortiGate firewalls, and maintain segmentation, remote access, and wireless security
Administer CrowdStrike and Microsoft Defender, and manage device compliance and encryption in Intune
Maintain identity and access controls in Entra ID and Active Directory, including MFA, conditional access, and privileged accounts
Maintain cloud email security, including filtering rules, phishing defenses, and SPF, DKIM, and DMARC records
Lead the firm’s data loss prevention and data classification program in Microsoft Purview, including sensitivity labels and policy tuning
Support retention, eDiscovery, and information barrier requirements in coordination with firm counsel
Assess AI platforms and cloud services before adoption, and implement the firm’s AI acceptable use controls
Serve as daily technical contact for the firm’s managed monitoring service, triaging and validating alerts
Investigate security events, perform containment and recovery, and contribute to incident response planning and tabletop exercises
Perform vulnerability and patch management across servers, endpoints, and network devices
Conduct vendor and application security reviews, and implement controls supporting NIST CSF, CIS Controls, or ISO 27001
FortiGate firewall administration, including policy, VPN, and intrusion prevention
Endpoint detection and response, ideally CrowdStrike Falcon, and Microsoft Defender
Microsoft 365 security administration, email protection, and SPF, DKIM, and DMARC
Microsoft Entra ID, Active Directory, and Intune in a hybrid configuration
Microsoft Purview sensitivity labels, data classification, and data loss prevention
Networking fundamentals, vulnerability management, and security monitoring
Law firm or professional services experience, including client security audits
AI governance experience, including acceptable use controls or AI risk assessment
Ability to assess and prioritize risk against practical business needs
Skill in explaining security risks clearly to attorneys, staff, and IT colleagues
Discretion and sound judgment in handling confidential and privileged information
Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent
Five or more years of hands-on network or information security experience
Ability to work in server rooms and network closets, including bending, reaching, and lifting up to 50 pounds, and availability for occasional after-hours maintenance and incident response. Reasonable accommodations may be made for qualified individuals with disabilities.
Actual compensation will be determined based on various factors, including the candidate’s qualifications, experience, skill set, and office location.
Woods Oviatt Gilman LLP is an Equal Opportunity Employer. We hire based on these qualities, a job’s requirements, our business needs, and an applicant’s qualifications.
Reports To: Director of Information Technology
Woods Oviatt Gilman, LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. The Network Security Engineer is a hands-on technical role responsible for implementing and maintaining the firm’s security controls across a hybrid Microsoft environment, including FortiGate firewalls, endpoint protection, Microsoft 365 and Intune, data protection, and a co-managed monitoring service. Working under the direction of the Director of Information Technology, who sets security policy and priorities, the Engineer provides the technical assessment, recommendations, and documentation behind those decisions, and exercises the judgment and discretion required to protect privileged client information.
Administer and tune FortiGate firewalls, and maintain segmentation, remote access, and wireless security
Administer CrowdStrike and Microsoft Defender, and manage device compliance and encryption in Intune
Maintain identity and access controls in Entra ID and Active Directory, including MFA, conditional access, and privileged accounts
Maintain cloud email security, including filtering rules, phishing defenses, and SPF, DKIM, and DMARC records
Lead the firm’s data loss prevention and data classification program in Microsoft Purview, including sensitivity labels and policy tuning
Support retention, eDiscovery, and information barrier requirements in coordination with firm counsel
Assess AI platforms and cloud services before adoption, and implement the firm’s AI acceptable use controls
Serve as daily technical contact for the firm’s managed monitoring service, triaging and validating alerts
Investigate security events, perform containment and recovery, and contribute to incident response planning and tabletop exercises
Perform vulnerability and patch management across servers, endpoints, and network devices
Conduct vendor and application security reviews, and implement controls supporting NIST CSF, CIS Controls, or ISO 27001
FortiGate firewall administration, including policy, VPN, and intrusion prevention
Endpoint detection and response, ideally CrowdStrike Falcon, and Microsoft Defender
Microsoft 365 security administration, email protection, and SPF, DKIM, and DMARC
Microsoft Entra ID, Active Directory, and Intune in a hybrid configuration
Microsoft Purview sensitivity labels, data classification, and data loss prevention
Networking fundamentals, vulnerability management, and security monitoring
Law firm or professional services experience, including client security audits
AI governance experience, including acceptable use controls or AI risk assessment
Ability to assess and prioritize risk against practical business needs
Skill in explaining security risks clearly to attorneys, staff, and IT colleagues
Discretion and sound judgment in handling confidential and privileged information
Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent
Five or more years of hands-on network or information security experience
Ability to work in server rooms and network closets, including bending, reaching, and lifting up to 50 pounds, and availability for occasional after-hours maintenance and incident response. Reasonable accommodations may be made for qualified individuals with disabilities.
Actual compensation will be determined based on various factors, including the candidate’s qualifications, experience, skill set, and office location.
Woods Oviatt Gilman LLP is an Equal Opportunity Employer. We hire based on these qualities, a job’s requirements, our business needs, and an applicant’s qualifications.
Network Security Engineer (Rochester) in rochester at Unknown Company
This position is listed as full time and able to be worked remotely.