Senior Application Security Engineer

Paul Hastings & Company Limited - Chicago, IL

Full-time - Senior

Chicago, IL

Professional, Scientific, and Technical Services

About the position

The Senior Application Security Engineer at Paul Hastings LLP is a key role within the Information Security Department, responsible for integrating secure design practices into the system development lifecycle. This position requires collaboration with various teams to deliver secure solutions and ensure the protection of applications and sensitive data. The ideal candidate will have a strong background in cybersecurity or systems engineering, with a focus on security architecture, design reviews, and validation of security controls.

Responsibilities

• Perform security architecture and design reviews of applications and services.
• Integrate security tasks and activities into system development methodologies.
• Perform validation of security controls to ensure consistency with industry standard methodologies.
• Partner with engineering on development, implementation, and monitoring of security controls.
• Perform vendor technical solution acceptance verification and validation.
• Develop technical solutions and new security tools to mitigate vulnerabilities.
• Assess gaps in existing policy and propose amendments or new policies.
• Write comprehensive reports including assessment-based findings and recommendations.
• Build threat models for enterprise applications to identify attack vectors.
• Collaborate with engineers and leadership to address security risks and provide mitigation recommendations.
• Provide guidance and support for self-testing and security control assessments.

Requirements

• Minimum of 12 years' application design experience (preferred).
• At least 5 years of information technology implementation or application quality assurance testing (required).
• BS degree in Computer Science or related field (preferred).
• Strong communication skills to articulate security and risk management terminology.
• Thorough understanding of the latest security principles, techniques, and protocols.
• Detailed technical knowledge of cloud security and application security.
• Hands-on experience with security systems, including vulnerability management and application testing.

Nice-to-haves

• Familiarity with project management methodologies.
• Experience with mobile security and secure development methodologies.

Benefits

• Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability
• Flexible Spending Account and Health Savings Account
• Healthcare Concierge and Advocacy
• Voluntary 401k Plan and Profit Sharing
• 10 Paid Holidays per year and a generous PTO program
• Family Support including Pediatric Mental Health and Parental Support
• Paid Parental Leave, Fertility Benefits, and Breast Milk Shipping
• Back-up Child Care, Elder Care, and Tutoring
• Wellness Programs (Employee Assistance Program, Mental Health, and Well-Being Events)
• Retirement Plan Consulting
• Anniversary Bonus Program
• Professional Development Programs
• Transportation Allowance and Commuter Benefits
• International Travel Insurance
• Auto/Home/Legal Insurance
• Pet Insurance
• Employee discounts