Technology Cloud Security Architect

Technology Cloud Security ArchitectCooley is seeking a Technology Cloud Security Architect to join the Security team.About Cooley: Cooley is a global law firm with an expansive practice and more than 3,000 employees and partners worldwide. We value and celebrate diverse perspectives and strive to create a workplace where every individual can thrive. At the core of Cooley’s success is the exceptional talent and unwavering spirit of our people. We embrace individuality while fostering a ‘one-firm’ culture where collaboration and creativity thrive. Our people are the foundation of our success and the driving force behind everything we do.Hybrid Schedule Philosophy: As part of the Cooley culture, we recognize and appreciate the value of being together, in person, to build comradery with others in the office and to be a contributing member of the Cooley office. However, we also appreciate the benefits and flexibility that come from remote working. As such, the default assumption for employees and partners is a hybrid schedule: some in-office presence and some work from home days absent certain essential in-office roles that require five (5) days/week in-office.Position Summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end, the Technology Cloud Security Architect is expected to recognize that the Cooley Technology department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined later in this document.The Technology Cloud Security Architect will work to maintain and monitor the security practices and systems implemented by the Firm within our cloud environments. The Technology Cloud Security Architect will proactively identify and mitigate cyber threats to minimize architectural and operational risk. This role requires a deep understanding of advanced cloud architectures, threat detection techniques, strong analytical skills, and the ability to work collaboratively with other security professionals and other Cloud Architects on the Technology Infrastructure and Development Operations team.Specific duties include, but are not limited to, the following:Position responsibilitiesDevelop and maintain a comprehensive security architecture framework that aligns to the enterprise architecture strategy and the organizations strategic objectivesArchitect, design, prioritize, coordinate, and communicate the security technologies necessary to ensure a highly secure yet usable computing environment in the CloudDevelop and implement architectural reference patterns to direct the selection, development, deployment, and utilization of Technology systems across the organizationPerform and participate in risk and security assessments, follow and enhance the security solutions lifecycle (evaluation, purchase, build, technical policy configuration, integration into Cloud environments, and run)Develop strategies to handle security incidents and coordinating responses to security breachesRecommend and coordinate implementation of identity and access management controls for cloud servicesProvide security guidance across the system development life cycle, including security architectural reviewsContribute to the development and implementation of security technology solutions for complicated and more complex environments and architectureAnalyze business impact and exposure based on emerging security threats, vulnerabilities and risks, and recommend technologies and solutions to mitigate themEnsure that cloud-based systems meet industry security standards and regulatory requirementsContribute to Cloud security solutions R&D to evaluate the latest cutting-edge tools against unfilled strategic security capabilities to drive business prioritiesAct as a subject matter expert on the implementation and capabilities of existing security controlsProvide direction and thought leadership to enterprise-wide initiatives applying security principles such as access control, encryption, and host security as well as state of the art and emerging technologies such as cloud computing, mobile computing, and next generation architectureIdentify the need for new security technology solutions; design, review and collaborate on the deployment of new solutionsStay up to date with the latest developments in security technologies, including mitigation strategies, threats, tools, attack vectors, and preventative measures, to enhance the organization security postureWork closely with other technology architects and engineers to ensure security is properly represented in their technology domains and integrated into their project planning to ensure consistency and compatibilityActively communicate with stakeholders to drive awareness and understanding of security architecture roadmaps and directionsProviding training and guidance on cloud security best practices to Technology staff and other employeesRequired to participate in a 7x24 on-call rotationAll other duties as assigned or requiredSkills and experience:Required:After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applicationsAbility to work extended and/or weekend hours, as requiredAbility to travel, as required3+ years direct applicable experience (e.g., cloud architecture security)Extensive knowledge and experience with the configuration of security controls and secure migration of enterprise applications to one of the major cloud providers such as Azure (preferred) and AWSExtensive knowledge and experience with developing Cloud Security Frameworks using industry best practices such as those from the Cloud Security Alliance (CSA) and NIST CSFExperience with implementing security tools and architecture in Cloud environments such as:Access ControlsData Loss Prevention (DLP)Web Application Firewalls (WAF)Secure SDLC and Software SecurityFirewallsAnti-malware and anomaly detection controlsData encryption in transit and at restNetwork securityMonitoringExperience with a formal requirements definitionPreferred:Bachelor’s degree in information technology or computer information systemsKnowledge of the MITRE ATT&CK framework and NIST Cyber Security FrameworkFamiliarity with common security controls in the enterprise (Firewall, Proxy, AV, SIEM, etc.)Experience with incident response proceduresExtensive knowledge and understanding of security issues, techniques, and implications across multiple computer platformsDemonstrated experience leading and developing others by providing technical guidance and leadership to project teamsSolid knowledge and understanding of security regulations and best practices such as the ISO 27000 family of standards.Solid knowledge and understanding of systems development life cycle (SDLC).Demonstrated experience translating business requirements into architectural deliverables and technical specificationsDemonstrated experience communicating technical information to business clients and less experienced technologistsCISSP, CISM or equivalentExperience with CI/CD pipelinesCloud Architecture and/or Cloud Security Certifications (AWS, Azure, GCP)Cloud Security Alliance (CCSP, CCSK) (ISC)2Additional security certificationsCompetencies:Exceptional customer service skillsExcellent analytical, problem-solving, customer service, project management and communication skillsGoal-orientedProven track record of excellent decision making, integrity and working with Technology management, business professionalsExcellent oral and written communication skills, including technical and user documentationStrong organizational skillsAbility to work independently and under high pressure with tight schedules and deadlinesAbility to interact well with all levels of business professionalsExcellent active listening skillsFlexible and patient with process development/execution and adherence to instruct project management practicesCapable of grasping new concepts quickly and without prior experienceDetail-orientedAbility to multi-task and work in fast-paced environmentAbility to interact and coordinate with several teams to achieve objectivesAbility to solve problems independently and simultaneously, effectively managing multiple tasksProfessional demeanor at all timesCooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE.The expected annual pay range for this position with a full-time schedule is $120,000 - $175,000. Please note that final offer amount will be dependent on geographic location applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience. We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off (“PTO”) and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.SummaryLocation: Reston; New York; Santa Monica; Los Angeles; Palo Alto; Chicago; Washington DC; Boston; Colorado; Seattle; San Francisco; San DiegoType: Full time