Senior Applications Security Engineer Permanent

Elite global law firm serving leading companies, financial institutions, and governments worldwide. With a long history as an international firm perfectly placed to help clients resolve their most complex legal challenges, wherever they may be.

Working exceptionally well together across geographic and practice boundaries. It is one of the reasons they attract and retain cross-border work and a diverse group of people.

Position Summary

This is a technical role working within the Applications Management team providing overall support to the Enterprise Business Applications. Primarily the role will focus initially on Application Security as it pertains to our external facing systems hosted in our on-premises DC’s. This will expand out to cover all applications including those hosted with our vendors and within the Cloud. This will include implementing process and procedures of the selection, implementation, and operation of systems in working with the wider Technology Team and with the Business.

Each Senior Engineer will be expected to take the lead in one or more of the day-to-day running of the Enterprise Systems listed within the team’s responsibilities.

Duties and Accountabilities

• Maintaining the Firm’s Web Application Firewall
• Monitoring and remediating our Public Application Security scores
• Developing and maintaining software application security policies and procedures
• Providing technical leadership, guidance, and direction to the application teams
• Developing and maintaining documentation of application security controls
• Implementing software application security controls
• Designing technical solutions to address security weaknesses
• Analysing system services, spotting issues in code, networks and applications
• Following security best practices in performing tasks
• Working with the other Technology Teams to remediate Application Security Risks
• Working with the Security Team to remediate any vulnerabilities that come up
• Working with the Security Team to remediate PEN Testing results
• Providing advice and assistance with on boarding new applications as pertains to Applications Security.
• 3rd Line Support responding to tickets, emails and communicating with end users in a timely fashion.
• Maintaining both the Service Desk and Team Knowledge Bases.
• Serve as an escalation point with a 24x7x365 on-call within a team rotation.
• Collaborate with Application Vendors to maintain software and hardware inventory and ensure software license compliance, and coordinate service with software and hardware vendors.
• Requesting and coordinating vendor support Install, upgrade, support and troubleshoot Enterprise Applications hosted on Windows Server 2016/2019 and Windows 10.
• Develop and maintain systems documentation and administrative guides.
• Provide troubleshooting and technical support services for software, networking components Monitor and respond to system alerts.
• Maintain an attitude and behaviour in keeping with our Technology Guiding Principles.
• Utilization of Service Now ticketing system for incident assignment, resolution, and management is mandatory.
• To participate on global/regional/office project and/or virtual teams as request by management.
• To participate in meetings related to the activities of the Technology department or related projects, when requested.
• Stay in tune with the Firm’s growing projects for practical experience.
• Professional and comfortable interaction with all levels of staff.
• Maintain a professional demeanour at all times.
• Overtime may be required and should be expected to meet deadlines. Advance notice will be given whenever possible.
• Remain flexible with shift hours and lunchtime based upon the needs of the group.
• Uphold firm, departmental and team rules and procedures.
• Contribute to team effort through communication, cooperation and coordination with other team members.
• Regular, predictable attendance is required with the mandatory utilization of the firm’s attendance system (where in use).
• Mentor other support areas including but not limited to:
• Service Desk
• NOC
• Local Support

Qualifications

• 2+ years’ experience with Application Security.
• Experience with Web Application Firewalls (WAF), Cloud Access Security Brokers (CASB), or Secure Web Gateways (SWGs) would add significant value.
• Experience with Apache, Nginx, IIS, HTML, HTTP, SSL, Certificates
• Experience with Reverse Proxy F5, NetScaler or similar
• Experience with troubleshooting tools such as Fiddler
• Experience configuring applications in a Microsoft Network –familiar with Active Directory domain services, structures/objects, security/trusts.
• Experience with Microsoft Windows Server Operating Systems, Active Directory.
• Experience with troubleshooting client and server side application issues in a MS environment.
• Experience with configuring Windows Desktops Registry settings.
• Experience with MS SQL Server (Installations, patching, Administrative tasks).
• Experience with MS Windows Server and Workstation (Installations, Patching, Admin tasks).
• Knowledge of standard Law Firm applications is beneficial and/or getting applications installed on Windows Desktop PC’s.
• Functional knowledge of supported business applications.
• College degree or relative work experience.
• Team player who is ambitious and motivated.
• Excellent interpersonal skills and patience working with others.
• Must be able to multitask and work in a fast-paced environment.
• Must have excellent customer service skills.
• Good verbal and written communication skills.
• Successful track record of working in IT Support background.
• A professional service background would be preferred and ideally some experience of working in a Partnership.
• Motivated, self-starter with the ability to work alone or as part of a team without constant supervision.
• A flexible and adaptable team player.
• Good problem management skills – able to see a problem through to a solution.
• Capacity to learn, to assimilate information quickly and to acquire new skills.
• Ability to analyse technical challenges and approaches solutions in a systematic fashion.
• Experience in the implementation and support of Enterprise technology solutions.
• Willing to travel domestically and overseas.
• Detailed oriented person with the willingness to learn.
• Ability to configure third party software and utilize application interfaces.
• Excellent troubleshooting skills.
• 60% of time spent working from the office 40% WFH
• Location and Reporting
• This is a hybrid in-office/remote role which is based in our Berlin office.
• This role reports to the Senior Manager, Applications Management (located in London).