System Engineer - Security

Bowman and Brooke • Minneapolis, MN

6d • $90,000 - $100,000 • Hybrid

About The Position

Bowman and Brooke LLP
is a national product liability law firm with 215 lawyers in 17 offices known for defending household name manufacturers of motor vehicles, medical devices, pharmaceuticals and consumer products in high exposure, technically intricate lawsuits and mass torts throughout all 50 states. Last year the firm surpassed its 1,000th trial milestone, affirming our rank as one of the foremost product liability trial firms in the country.

Position Summary: Systems Engineer - Security is responsible for implementing, operating, and maintaining the firm’s information security technologies and controls in support of the overall security strategy established by the Manager – IT Security. This role focuses on the hands-on execution of security operations, monitoring, investigations, and system hardening to protect the firm’s systems, data, and client information in a highly regulated legal environment.

Requirements

• 5+ years of experience in IT security engineering.
• Expertise in regulatory requirements and frameworks, such as HIPAA, NIST, and SOC 2.
• Strong knowledge of IT infrastructure, network security, and data protection principles.
• Hands-on experience with security tools (e.g., firewalls, IDS/IPS, endpoint security) and technologies (e.g., Active Directory, Microsoft 365, Azure AD).
• Proven ability to lead incident response efforts, including threat detection, analysis, and remediation.
• Strong problem-solving skills, with the ability to handle complex security challenges.
• Ability to communicate complex technical security concepts to both technical and non-technical stakeholders, including senior management.

Nice To Haves

• 4-year degree in Computer Science, Information Technology, or a related field is desirable.
• 3 years of Information Security, Network Security, or Cyber Security.
• Hands-on experience with Microsoft Azure (M365/O365)
• Strong understanding of identity and access management (IAM).
• Experience in the legal industry or with law firm clients is highly desirable.
• Certifications such as CISSP, CISM, or CRISC are preferred.

Responsibilities

• Develops and maintains daily security monitoring to ensure the integrity, availability, and effectiveness of security systems and processes, including log and system data analysis.
• Leads and supports identity and access management (IAM) solutions, including user lifecycle management, access controls, authentication mechanisms, and enforcement of least-privilege access across on-premises and cloud environments.
• Monitors, investigates, and responds to security incidents, phishing attempts and cyberattacks, contributing to forensic analysis to identify vulnerabilities and prevent recurrence.
• Assesses security infrastructure and recommends, plans, and executes upgrades and new security solution deployments to improve performance and resilience.
• Collaborates across the firm to embed security into systems, processes, and cloud initiatives, safeguarding digital assets.
• Configures, maintains, and upgrades security software to operate effectively within the broader IT and cloud environments.
• Designs, implements, and maintains information security protocols to protect electronic data and systems from unauthorized access.
• Produces performance, capacity, and licensing reports to support forecasting and utilization planning.
• Maintains comprehensive documentation for security systems, configurations, applications, and licensing.

Benefits

• We offer a competitive compensation and benefits package including everything you’d expect -- medical, dental, and vision insurance; firm paid life insurance and short and long-term disability; retirement savings plan with employer profit sharing contributions, bonus programs and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 251-500 employees