Senior Technology Cloud Security Architect

Senior Technology Cloud Security Architect

Cooley is seeking a Technology Cloud Security Architect to join the Security team.

Position Summary:  Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end, the Technology Cloud Security Architect is expected to recognize that the Cooley Technology department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined later in this document.

The Technology Cloud Security Architect will work to maintain and monitor the security practices and systems implemented by the Firm within our cloud environments.  The Technology Cloud Security Architect will proactively identify and mitigate cyber threats to minimize architectural and operational risk. This role requires a deep understanding of advanced cloud architectures, threat detection techniques, strong analytical skills, and the ability to work collaboratively with other security professionals and other Cloud Architects on the Technology Infrastructure and Development Operations team. Specific duties include, but are not limited to, the following:

Position responsibilities

• Develop and maintain a comprehensive security architecture framework that aligns to the enterprise architecture strategy and the organizations strategic objectives
• Architect, design, prioritize, coordinate, and communicate the security technologies necessary to ensure a highly secure yet usable computing environment in the Cloud
• Develop and implement architectural reference patterns to direct the selection, development, deployment, and utilization of Technology systems across the organization
• Perform and participate in risk and security assessments, follow and enhance the security solutions lifecycle (evaluation, purchase, build, technical policy configuration, integration into Cloud environments, and run)
• Develop strategies to handle security incidents and coordinating responses to security breaches
• Recommend and coordinate implementation of identity and access management controls for cloud services
• Provide security guidance across the system development life cycle, including security architectural reviews
• Contribute to the development and implementation of security technology solutions for complicated and more complex environments and architecture
• Analyze business impact and exposure based on emerging security threats, vulnerabilities and risks, and recommend technologies and solutions to mitigate them
• Ensure that cloud-based systems meet industry security standards and regulatory requirements
• Contribute to Cloud security solutions R&D to evaluate the latest cutting-edge tools against unfilled strategic security capabilities to drive business priorities
• Act as a subject matter expert on the implementation and capabilities of existing security controls
• Provide direction and thought leadership to enterprise-wide initiatives applying security principles such as access control, encryption, and host security as well as state of the art and emerging technologies such as cloud computing, mobile computing, and next generation architecture
• Identify the need for new security technology solutions; design, review and collaborate on the deployment of new solutions
• Stay up to date with the latest developments in security technologies, including mitigation strategies, threats, tools, attack vectors, and preventative measures, to enhance the organization security posture
• Work closely with other technology architects and engineers to ensure security is properly represented in their technology domains and integrated into their project planning to ensure consistency and compatibility
• Actively communicate with stakeholders to drive awareness and understanding of security architecture roadmaps and directions
• Providing training and guidance on cloud security best practices to Technology staff and other employees
• Required to participate in a 7x24 on-call rotation
• Perform other duties as assigned

Skills and experience:   

Required:

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel as required
• 3+ years direct applicable experience (e.g., cloud architecture security)
• Eligible for consideration of Senior designation 5+ years direct applicable experience
• Extensive knowledge and experience with the configuration of security controls and secure migration of enterprise applications to one of