Paul Hastings · 16 hours ago
Senior Application Security Engineer
Washington, DC
Full-time
Onsite
Mid, Senior Level
$126K/yr - $180K/yr
4+ years expPaul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. They are seeking a Senior Application Security Engineer, Data Governance to define and support the Firm’s information and data governance model, ensuring the integrity, confidentiality, and availability of data throughout the enterprise.
AdviceConsultingLegal
Responsibilities
Engineer and implement solutions that support the Firm’s information governance model, enforcing secure, efficient data transfer and operations of Firm and client data across cloud environments (IaaS, PaaS, and SaaS)
Opine on data protection considerations for migrating systems to the cloud, identifying potential security risks, and determining necessary security controls
Collaborate closely with engineering teams, promoting the adoption/adherence to data governance best practices, consistent with the Firm’s information data protection and information security policies, standards, and guidelines
Support data protection strategies for secure data sharing, transfer, and storage across the organization, implementing data protection controls to satisfy data confidentiality, integrity, and availability objectives
Provide guidance to firm personnel at all levels, elaborating on the firm’s relevant policies and information governance processes
Provide operational support for legacy data projects relating to client and firm data
Assist with the development of data protection and data privacy policies and procedures
Assist Management with responses to partner requests and other internal and external requests relating to data protection and data privacy
Support the client consent/notification process and ensure compliance with client guidelines related to the use of data across various form systems, including cloud platforms, external data processors, and cross-border data transfers
Support the legal and compliance teams to ensure continuous compliance with relevant industry standards and regulations concerning cloud security and data governance, such as GDPR, CCPA, and others applicable to our operations
Collaborate with various stakeholders, including Office of the General Counsel, Information Security Engineering and Operations, IT engineering, application development, and business units, to establish and enforce cloud and data governance policies within Firm technology
Support internal investigations pertaining to the use and storage of sensitive data
Qualification
Required
Minimum of four (4) years project and program management experience
Understanding of the technology and operational risks as related to internal technology solutions
Awareness of additional information security standards (CSF, NIST, ISO), as well as the emerging cyber threat landscape
Technical understanding of modern applications, platforms and architectures
Technical understanding of CTERA and NetApp storage solutions
Understanding of change management processes and procedures and the ability to create and submit change requests
Strong analytical skills, as well as strong written and verbal communication skills
Highly detail oriented
Create and update Solution Design documentation and run books
Proficiency in Document Management Systems (DMS), with preference given to candidates with a working knowledge of iManage Work in a legal setting, including matter workspace and document security
Advanced proficiency in Microsoft applications, (e.g., Word, Excel, PowerPoint, Teams, Visio)
Ability to develop and maintain a solid working relationship across multiple stakeholder groups
Preferred
Knowledge of privacy and information security frameworks (e.g., NIST, ISO, etc.) and relevant regulatory requirements (e.g., GDPR, CCPA, etc.)
Information Governance experience in law firm
Demonstrated ability to deliver clear, concise, and factually accurate written and oral communications appropriate for the intended audience
Prior experience using and/or administering iManage Work and Threat Manager, Varonis; MS Purview is a plus
Understanding of information governance concepts and technologies
Benefits
Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short- and Long-Term Disability
Flexible Spending Accounts and Health Savings Account
Healthcare Concierge and Advocacy
Lifestyle Spending Account
Voluntary 401(k) Plan and Profit Sharing
10 Paid Holidays per year and a generous PTO Program
Family Support including Paid Parental Leave, Fertility Benefits, Breast Milk Shipping, Back-up Child Care, Elder Care, and Tutoring
Wellbeing programs (Employee Assistance Program, Relationship Support, Mental Health, Menopause and Midlife Health and Well-Being Events)
Retirement Plan Consulting
Anniversary Bonus Program
Professional Development Programs
Transportation and Commuter Benefits
International Travel Insurance
Critical Illness, Hospital Indemnity and Accident Insurance
Auto/Home/Pet Insurance
Prepaid Legal Insurance
Employee Discounts
And More!
Company
Paul Hastings
Paul Hastings is an international law firm that provides legal solutions to many financial institutions and Fortune 500 companies.
1001-5000 employees
H1B Sponsorship
Paul Hastings has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (14)
2024 (16)
2023 (11)
2022 (14)
2021 (10)
2020 (13)
Funding
Current Stage
Late StageLeadership Team
Gerd Hegele
Partner
Kerry Johnson
Partner
Recent News
2026-01-21
bloomberglaw.com
2025-11-14
Company data provided by crunchbase