Senior Cloud Application Security Engineer

Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. With a strong presence throughout Asia, Europe, Latin America, and the U.S., we have the global reach and extensive capabilities to provide personalized service wherever our clients' needs take us. As one of the world's leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth.

We have an opening for a Senior Cloud Application Security Engineer in our Information Security Department.

The Senior Cloud Application Security Engineer will serve as subject matter expert integrating secure design for cloud applications and Software-as-a-Service (SaaS) products within the solution development lifecycle. This position collaborates with business units, project management, and engineering teams to deliver secure solutions. Qualified candidates will have a background in cybersecurity or cloud engineering.

In this capacity, the Senior Cloud Application Security Engineer will:

• Perform security architecture and design reviews of cloud applications and SaaS products;
• Integrate security tasks and activities into solution development methodologies (e.g. planning, design, implementation, operations, maintenance, and disposal);
• Perform validation of security controls to ensure consistency with industry standard methodologies; and
• Collaborate with various Information Security and Information Technology teams to ensure the overall security of the firm's public cloud footprint.

In addition, the Senior Cloud Application Security Engineer will be expected to have experience with the following areas of responsibility:

• Partner with engineering on development, implementation, and monitoring of security controls for the protection of applications, services and highly sensitive data;
• Perform vendor technical solution acceptance verification and validation;
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks;
• Assess gaps in existing policy and propose amendments to existing policy or new policy to address these gaps;
• Building threat models for enterprise applications to identify attack vectors and threats;
• Collaborate with engineers, consultants and leadership to address security risks and provide mitigation recommendations for Cloud applications; and
• Provides guidance and support to self-testing, security control assessment, preparation of remediation plans, and development of continuous monitoring plans.

Proficiencies:

• Strong communication skills with ability to articulate and translate security and risk management terminology in business terms;
• Thorough understanding of the latest security principles, techniques, and protocols;
• Detailed technical knowledge of cloud security and one or more of the following: application security, mobile security, and Infrastructure-as-Code DevOps security;
• Hands on experience with security systems, including vulnerability management, identity and access management, security risk assessments, SAST/DAST, etc.; and
• Strong proven experience providing secure design guidance for diverse applications.

Qualifications:

• Minimum of 12 years' Information Security experience (preferred);
• At least 5 years experience securing public cloud (required); and
• BS degree in Cybersecurity, Computer Science or related field (preferred).

Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.

The salary wage range that we expect to pay for this position is a minimum of $133,400 and a maximum of $190,000 annually. The actual pay wage may vary based on experience or other relevant factors.

Eligible employees can participate in the Firm's comprehensive benefits program, which include the following:

• Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short- and Long-Term Disability
• Flexible Spending Account and Health Savings Account
• Healthcare Concierge and Advocacy
• Lifestyle Spending Account
• Voluntary 401(k) Plan and Profit Sharing
• 10 Paid Holidays per year and a generous PTO Program
• Family Support including Paid Parental Leave, Fertility Benefits, Breast Milk Shipping, Back-up Child Care, Elder Care, and Tutoring
• Wellbeing programs (Employee Assistance Program, Relationship Support, Mental Health and Well-Being Events)
• Retirement Plan Consulting
• Anniversary Bonus Program
• Professional Development Programs
• Transportation and Commuter Benefits
• International Travel Insurance
• Auto/Home/Pet Insurance
• Prepaid Legal Insurance
• Employee Discounts
• And More!

The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women's Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives here.

Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.