Lead Security Engineer

OVERVIEW

Practising Law Institute (PLI) educates and informs lawyers and other professionals with innovative programs, publications, podcasts, and additional resources. With a sterling reputation developed over 90 years, PLI is a trusted source of professional development and knowledge for the legal community. A nonprofit organization, PLI is also known for its dedication to providing pro bono training and resources to ensure access to justice. PLI's client base includes a large array of prestigious law firms, corporations, and government agencies. We are also proud to have recently been named one of the "Brands That Matter" by Fast Company. More information about PLI may be found on our website www.pli.edu.

PLI is searching for a technology professional to fill the role of Lead Security Engineer (responsibilities and qualifications are described below) . Work in a collaborative environment with a diverse, employee community where staff enjoy a generous benefits package and a genuine commitment to a work-life balance (4+ weeks of paid time off and hybrid remote / in-person schedules for most roles).

POSITION OVERVIEW

The Lead Security Engineer is responsible for overseeing enterprise security initiatives. At PLI, this position applies shift-left security methodologies, adheres to industry best practices, and utilizes agile frameworks to protect both cloud and hybrid environments. As a key member of the Computer Security Incident Response Team (CSIRT), the Lead Security Engineer coordinates incident response activities in collaboration with internal stakeholders and external vendors. The role encompasses perimeter defense, DevSecOps integration, management of application security tools, identity management, and network and cloud security. Direct hands-on experience is essential, and the position reports directly to the Head of Site Reliability Engineering.

KEY RESPONSIBILITIES

• Partner with technology team on Security design and implementation.
• Architect, deploy, and supervise perimeter protection measures such as web application firewalls (WAF), cloud-based next-generation firewalls, and CDN configurations to mitigate network and application threats.
• Formulate and maintain robust identity and access management (IAM) strategies, incorporating zero-trust architecture, comprehensive identity governance, and privileged access management protocols to secure all infrastructure and applications.
• Direct application security initiatives by integrating static and dynamic code analysis tools (e.g., Veracode, Snyk) into CI / CD pipelines to facilitate early-stage security.
• Oversee the entire vulnerability management lifecycle, including discovery, prioritization, risk assessment, and remediation tracking via automated solutions and manual processes.
• Lead CIRT operations, facilitating swift incident detection and resolution through SIEM solutions and threat intelligence platforms, supported by comprehensive playbooks and KPIs.
• Collaborate with DevSecOps and SRE teams to ensure alignment of security controls with DevOps practices and secure infrastructure-as-code workflows (Terraform, Ansible).
• Security Posture for cloud and hybrid environments across AWS, Azure, and GCP, ensuring robust segmentation, secure communication, and regulatory compliance.
• Provide mentorship and guidance to security and engineering teams concerning best practices for vulnerability management, identity controls, network security, and application security.
• Other duties as assigned.

QUALIFICATIONS AND REQUIREMENTS

YOUR BENEFITS AT PLI

PLI offers a generous benefits package and is committed to creating an interesting, collegial, and supportive work environment :

COMPENSATION RANGE FOR THIS POSITION

$140,000 - $175,000 per annum

(Exact compensation offer may vary based on the candidate's job-related skills and work experience.)

EEO STATEMENT

PLI is an equal opportunity employer and does not discriminate against any candidate based on race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, military and veteran status, sexual orientation, or any other factor protected by federal, state or local law.

Only those applicants who meet our requirements for this position will be contacted.

Practising Law Institute is an equal opportunity employer.Click here to learn more.