Base Career helps you apply smarter for this job.
Key skills for this role
Our firm is a large, multi-state law practice with a sophisticated technology environment and a deep responsibility to protect highly sensitive client and matter data. We are seeking a Senior Security Engineer to strengthen and mature our Microsoft-centered security program. This is a hands-on engineering role for someone who thrives on threat detection, tenant hardening, identity modernization, and security automation—and who can clearly communicate risk and remediation to both technical teams and firm leadership.
Our firm is a large, multi-state law practice with a sophisticated technology environment and a deep responsibility to protect highly sensitive client and matter data. We are seeking a Senior Security Engineer to strengthen and mature our Microsoft-centered security program. This is a hands-on engineering role for someone who thrives on threat detection, tenant hardening, identity modernization, and security automation—and who can clearly communicate risk and remediation to both technical teams and firm leadership.
Engineer, tune, and operate detections and response workflows across Microsoft Defender XDR and Microsoft Sentinel, including authoring and optimizing KQL queries, analytics rules, workbooks, and hunting content.
Lead and execute M365 tenant hardening initiatives across the E5 stack, establishing and maintaining secure baselines and configuration standards.
Administer and harden endpoint security through Microsoft Defender for Endpoint and Intune, including device compliance, configuration profiles, and attack surface reduction.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
Phoenix, USA
At Morgan & Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client suppo
Baltimore, USA
At Morgan & Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client suppo
Philadelphia, USA
At Morgan & Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client suppo
Louisville, USA
, USA
, USA
Pensacola, USA
Baltimore, USA
Phoenix, USA
Baltimore, USA
Philadelphia, USA
Build and maintain security automation (e.g., Logic Apps, automation rules/playbooks, PowerShell, Azure Functions) to reduce manual effort and accelerate response.
Own vulnerability assessment and remediation tracking, partnering with IT and infrastructure teams to close gaps.
Secure and govern Azure infrastructure, applying cloud security best practices across resources and workloads.
Configure and manage Microsoft Purview for data governance, information protection, data loss prevention, insider risk, and compliance.
Strengthen identity and access management (IAM) practices firm-wide, including least-privilege enforcement and access reviews.
Secure and govern AI and AI agents across the firm, addressing data exposure, identity and access for agents, acceptable-use controls, and the confidentiality and privilege concerns unique to a legal environment.
Document standards, procedures, and runbooks; communicate security posture, incidents, and recommendations clearly to technical staff and firm leadership.
Manage application security assessments and lifecycle oversight to retire applications that are inactive or pose security risks.
Experience at a law firm or in a similarly regulated, confidentiality-driven environment.
Demonstrated experience securing AWS and/or GCP environments in enterprise settings.
Experience designing and implementing security controls for AI and agent-based workloads.
4–7+ years of experience as a Security Engineer at a large, multi-state organization.
#LI-MB1
Largest personal injury law firm in the United States, handling cases in trial practice, medical malpractice, workers' compensation, and product liability.
Visit company websiteJobs and hiring trendsSenior · 7+ years experience
Apply faster on company sites with our extension.