JOB TITLE: Information Security Analyst

OVERVIEW: Duane Morris LLP, a global law firm with 900 + attorneys in offices across the U.S. and around the world, offers innovative solutions to the legal and business challenges presented by today’s evolving global markets. 

POSITION SUMMARY:  Our Information Security team is growing and we have an opening for an Information Security Analyst to help support and execute Duane Morris's security and compliance objectives. Reporting to the Information Security Manager, this role will be a multi-faceted security specialist function that assists in technical security related functions as well as GRC/compliance functions. The ideal candidate is a self-motivated individual that is great at task and time management, and is willing to learn and adapt to changing environments.

RESPONSIBILITIES:

• Contribute to various projects and initiatives aimed at continually improving the security of Duane Morris’s environment
• Use security tools for continual monitoring of systems to identify malicious or suspicious activity
• Analyze activity to determine weaknesses that can be exploited, exploitation methods, and the potential effects on systems and information if compromised
• Analyze audit logs for exceptions to policy and DLP events
• Analyze suspicious emails to identify threats and actionable tasks
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
• Participate in assessing the vulnerability scans and results for servers and workstations
• Be prepared to respond to cyber incidents in accordance with the Firm’s Incident Response Plan, including investigation, handling, documentation, and remediation
• Maintain expertise on the evolving tactics, techniques, and procedures of threat actors and contribute to Security trend reports
• Assist in third party risk management and due diligence processes
• Participate in evidence gathering processes to support security processes and audit procedures
• Performing change management and periodic IT maintenance functions
• Successfully sets priorities, performs tasks in an orderly fashion, and meet time deadlines

QUALIFICATIONS (KNOWLEDGE, SKILLS AND ABILITIES):

• Minimum of 3 years’ experience in an Information Security and/or Cybersecurity professional role
• College degree preferred; advanced education in computer science or engineering a plus
• Familiarity or experience with the ISO 27001 and NIST information security standards and their implementation
• Knowledge of cyber defense practices, bad actor TTP’s and industry recognized best practices
• Ability to communicate and collaborate effectively and professionally with all levels of a professional services organization
• Ability to work in a fast-paced environment and in both team and independent settings
• Basic project management skills
  

BENEFITS:

• Comprehensive healthcare, dental, vision, and prescription plans.
• Commuter, HSA and FSA spending accounts
• Short-term and long-term disability and life insurance coverage
• 401k and Pension Plan
• 20 vacation days, 11 paid holidays
• Employee Referral Bonus ($3,000.00)

EEO STATEMENT:  Duane Morris is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, gender identity or expression, marital status, national origin, physical or mental disability, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please contact Shawn Tato, HR Assistant at 215-979 1224.

DATA PRIVACY STATEMENT:  Duane Morris LLP is a limited liability partnership organized under the laws of Delaware. References in this privacy notice to “Duane Morris”, “we” or “us” are references to Duane Morris LLP and our affiliated entities. This privacy notice together with our Website Disclaimer and (if applicable) our relevant terms of business or other contract between us (if applicable) set out the basis on which Duane Morris processes your personal data (and any mandated controller/processor information). Reference in this privacy notice to “personal data” means any information that identifies, or could reasonably be used to identify, a living individual, either on its own or together with other information. Our “Website” means this website and any other websites of Duane Morris. Duane Morris is committed to protecting personal data and respecting your privacy. Please read this notice carefully to understand our practices with respect to personal data and how we treat it and how you can exercise your rights in connection with it. You should also read any other privacy notices that we give to you, that might apply to our use of your personal data in specific circumstances from time to time.

Data Privacy Statement

Disclaimer: The above is intended to describe the general content of and requirements for the performance of this job.  It is not a contract or employment agreement and is not to be construed as an exhaustive statement of all functions, responsibilities or requirements.  In addition, Duane Morris reserves the right to amend, suspend or terminate any benefit plan, in whole or in part, at any time. The authority to make such changes rests with the Plan Administrator