Senior Information Security Engineer - AI & Application Security

Faegre Drinker is a firm designed for clients and designed for you. We understand that our people are critical to our success and we are committed to investing in our paraprofessional, administrative and operations professionals. We are always looking for talented, service-focused individuals to join our flexible and high-performing culture. With technology tools and resources that support our hybrid work environment, our colleagues enjoy a culture of learning, support for work and personal goals, opportunities to give back to our communities, and competitive benefits and rewards programs. At Faegre Drinker, you will have the opportunity to share your expertise within and across teams and contribute to our success.Job Description Summary:Faegre Drinker has an opportunity for a Senior Information Security Engineer – AI & Application Security to work with our Technology & Innovation team in our Chicago, Denver, Florham Park, downtown Indianapolis, Los Angeles, Minneapolis, Philadelphia, Princeton, San Francisco, New York City, or Washington, D.C. offices. You will be part of a dynamic team responsible for owning the AI security for the firm and leading the application security function. This position will work with other talented individuals who share a passion for doing great work in the best interest of our clients.Job Description:What you would do:Owns security assessment of the firm’s AI platforms and AI-enabled tools, including vendor-provided platforms such as Harvey and Microsoft Copilot, applying the OWASP Top 10 for LLMs and the firm’s AI governance framework as the baseline evaluation standardDesigns and executes testing for prompt injection, jailbreaking, data leakage, and cross-client isolation in retrieval-augmented and agentic AI platforms, producing evidence that one client’s data cannot influence another client’s outputs in support of the firm’s information barrier and privilege obligationsEvaluates and hardens API and integration security across AI platforms, automation tooling, and connected data systems, including authentication and authorization, gateway policies, rate limiting, and anomaly detection for misuse or exfiltration through legitimate channelsConducts ongoing security and configuration assessments of the firm’s Azure, SaaS, and on-premises applications and services to identify misconfigurations, design weaknesses, and development errorsServes as the embedded security partner to the Catalyst Studio and AI and Automation teams, participating in design reviews and ensuring security requirements are defined before build beginsBuilds and reports metrics on application and AI security posture in business terms relevant to legal operationsSpecial projects and other duties as assignedWhat is expected:Ability to problem-solveExcellent interpersonal, verbal and written communication skills, including the ability to communicate effectively in a virtual environment (e.g., via phone, web/videoconference)Ability to concentrate on tasks, make decisions and work calmly and effectively in a high-pressure, deadline-orientated environmentDemonstrated ability to use good judgment in taking initiative while asking for direction or clarification and consulting others, as appropriateWillingness to be flexible with time and adjust to a changing work environmentAbility to build and maintain positive relationships, both internally and externally, while maintaining a client service orientationAbility to use sound judgment and discretion in dealing with highly confidential informationAbility to take direction and accept supervisionDemonstrated ability to work independently, organize and accurately prioritize work, be detail-oriented, understand when urgency is required and use good judgment in varied situationsAbility to work effectively with co-workers in a team oriented collaborative environmentWhat we offer:Flexible working environment for work-life successOpportunity to participate in firm-sponsored volunteer eventsWellness programming with personalized content and activitiesProfessional environment and the opportunity to work with experts at the top of their fieldsVariety of health plan options, as well as dental, vision and 401(k) plansGenerous paid time offThe anticipated initial salary for someone who is hired into this position is $160,200 - $183,100.Actual initial salary may be above or below the above-identified range and will be based on the relevant skills, training, experience, and other job-related factors, including the location where the position is filled, in all cases consistent with applicable law. This is an exempt role and the initial salary range listed above is just one component of Faegre Drinker's total compensation and benefits package for professional staff, which includes, but is not limited to, a discretionary bonus; life, health, accident, and disability insurance; and a 401(k) plan.What is required: Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent years of experienceEight years or more of relevant experience in application security, secure software development, or information security, including at least three years focused on application securityStrong understanding of the OWASP Top 10 and secure coding principles, and demonstrated familiarity with the OWASP Top 10 for LLMsHands-on experience with application security testing, including threat modeling, secure code review, and static and dynamic testing, and managing findings through remediationWorking knowledge of the software development lifecycle and experience embedding security into development and deployment pipelines in cloud or hybrid environmentsProficiency in at least one programming or scripting language sufficient to review code and build testing toolingExperience designing or assessing API security controls, including authentication, authorization, and gateway policiesWorking knowledge of AI and LLM security risks, including prompt injection, data leakage, and cross-tenant isolation in retrieval-augmented architecturesExperience assessing third-party and SaaS vendor security architecturesDetailed technical knowledge of application, operating system, and network security fundamentalsThorough understanding of current security principles, techniques, and protocols.Ability to effectively communicate information security issues, risks, and recommendations to both technical and non-technical peers and management, including through well-written reportsApply now if you are ready to join the Faegre Drinker team!Application Deadline: October 23, 2026Faegre Drinker Biddle & Reath LLP participates in the federal government's E-Verify program. With all new hires, we provide the Social Security Administration and, when applicable, the US Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.Faegre Drinker Biddle & Reath LLP is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all employees and applicants for employment. We do not discriminate on the basis of race, color, religion, age, national origin, disability, sex, sexual orientation, gender, gender identity, gender expression, marital status, veteran or military status, or any other characteristic made unlawful by applicable federal, state or local laws. Equal employment opportunity will be extended to all persons in all aspects of employment, including retirement, hiring, training, promotion, transfer, compensation, benefits, discipline and termination.For candidates residing in California, please click here for access to our firm’s California Consumer Privacy Act (CCPA) Applicant Privacy Policy.Notice to Recruiters and Staffing Agencies: Faegre Drinker Biddle & Reath (and any subsidiary) has an internal recruiting department and does not accept unsolicited resumes.SummaryLocation: New York City; Denver; Princeton; Indianapolis Downtown; Florham Park; Minneapolis; Los Angeles; Chicago; Washington D.C.; Philadelphia; San FranciscoType: Full time