Senior Security Engineer

Job Description

We have an exciting opportunity for a Senior Security Engineer to join the growing Information Security team in Belfast.

The firm's ability to keep our clients' data secure is a bedrock for our reputation as a trustworthy professional services partner to many of the world's large and prestigious organisations. Information security is not an afterthought; it is core to all that we do, to protect not only our data but that of our clients, and has the unwavering support of the Board.
The in-house Information Security team is a core part of our technology services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO
27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearman's strategy to lead where global complexity creates opportunity.
In addition, you will have the opportunity to share and gain intel from the firm's cybersecurity lawyers. The global team have experience advising clients on hundreds of incidents. Leveraging this experience, they feedback practical lessons learned into clients' cyber risk management and incident response programmes.

What you will do

The Security Engineering Analyst is a key member of the firm's Information Security team, responsible for supporting the design, implementation, and maintenance of the firm's security infrastructure. This role ensures that new capabilities and features are integrated securely into the firm's systems. It involves a combination of hands‑on engineering tasks and active participation in incident response, risk assessments, and the ongoing enhancement of security operations.

Security

Engineering and Infrastructure Management

• Assist in the implementation, and maintenance of secure infrastructure across the technology estate
• Manage and optimise the Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms
• Monitor and resolve issues with the core technology stack.

Security Consultation and Collaboration

• Provide security engineering advice and consultation across all levels of the firm, with support from senior Security Engineering colleagues.
• Work closely with IT, MSSPs, and other internal teams to align global security efforts and ensure consistent implementation of controls.

Automation and Operational Efficiency

• Support the automation and orchestration of security processes to enhance efficiency and reduce manual workload.
• Track and report on key performance indicators (KPIs) and metrics to evaluate the effectiveness of security controls and identify areas for improvement.

Security Architecture and Strategic Development

• Contribute to the development of a best‑in‑class security architecture in collaboration with senior Security Engineering staff and external vendors.
• Assist in delivering the strategic roadmap for security engineering that aligns with broader business and IT objectives.
• Monitor the progress of ongoing projects involving Security Engineering to ensure alignment with strategic goals.

Incident Response and Vulnerability Management

• Support the enhancement of monitoring capabilities in collaboration with the broader Information Security team.
• Coordinate with Cyber Defence Operations and other teams to investigate and respond to security incidents.
• Participate in incident response activities, including technical analysis, implementation of fixes, and post‑incident reviews.
• Collaborate with Vulnerability Management teams to remediate identified vulnerabilities and improve the firm's security posture.

What you will have

• Experience in information security or technology, with a portion of that time spent in a Security Engineering or similar technical security role.
• Strong understanding of networking and routing protocols (e.g., TCP/IP) and core services (e.g., DNS, SMTP).
• Operational experience in multiple of the following areas:
  • SIEM
  • SOAR
  • Detection rules, usecases and Playbooks
  • Ansible
  • Firewall IDS/IPS
  • Windows / Linux OS
  • Cloud Security / CNAPP
  • AWS / Azure
• Highly analytical mindset with strong…