Technology Cyber Security Architect

Technology Cyber Security Architect

Cooley is seeking a Cyber Security Architect to join the technology team.

Position summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end, the Cyber Security Architect will work to maintain and monitor the security practices and systems implemented by the firm.The Cyber Security Architect will proactively identify and mitigate cyber threats to protect our organization's assets with a focus on emerging technologies and artificial intelligence (AI) security. Working collaboratively with Technology and Innovation teams, the position will design advanced security architecture and threat detection techniques. Specific duties and responsibilities include, but are not limited to, the following:

Position responsibilities:

Design and maintain enterprise security architecture across on-premises, hybrid, and AI-enabled environments

Define security standards, patterns, and reference architectures aligned with business objectives and regulatory requirements

Conduct security architecture reviews for new systems, applications, AI/ML platforms, and major technology changes

Partner with engineering, infrastructure, DevOps, and data teams to embed security, privacy, and governance into system design and delivery

Design security controls for AI and ML systems, including data pipelines, model training environments, inference platforms, and AI integrations

Identify and mitigate risks related to AI systems, such as data leakage, model poisoning, prompt injection, and adversarial attacks

Evaluate and recommend security tools, platforms, and AI-enabled security technologies

Ensure architectures comply with applicable legal, regulatory, and industry frameworks (e.g., NIST, ISO 27001, SOC 2, GDPR, emerging AI regulations)

Establish guardrails for responsible and secure use of generative AI and large language models, including access controls, monitoring, logging, and auditability

Support incident response, forensic investigations, and post-incident architecture improvements

Provide guidance and mentorship to security engineers and other technical stakeholders

Communicate architectural decisions and security risks clearly to technical and non-technical audiences, including senior leadership

Required to participate in a 7x24 on-call rotation

All other duties as assigned or required

Skills and experience:

Required:

After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications

Ability to work extended and/or weekend hours, as required

Ability to travel, as required

3+ years direct applicable experience (e.g., cybersecurity, infrastructure, or systems architecture). Senior level candidates considered with 5+ years direct applicable experience.

Strong knowledge of network security, identity and access management (IAM), encryption, and endpoint security

Ability to translate business requirements into secure technical designs

Extensive knowledge and experience with the configuration of security controls and secure migration of enterprise applications

Experience with implementing security tools and architecture such as:

Access Controls

Data Loss Prevention (DLP)

Web Application Firewalls (WAF)

Secure SDLC and Software Security

Firewalls

Anti-malware and anomaly detection controls

Data encryption in transit and at rest

Network security

Monitoring

Experience with a formal requirements definition

Preferred:

Bachelor's Degree in Information Technology, Computer Information Systems, Computer Science, Information Security, or related discipline

Familiarity with security frameworks and best practices (NIST CSF, Mitre ATT&CK, Zero Trust, OWASP, emerging AI regulations)

Familiarity with common security controls in the enterprise (Firewall, Proxy, AV, SIEM, etc.)

Experience with incident response procedures

Working knowledge of securing AI-enabled applications and services, including data access controls, model integration, and API security

Experience applying existing security frameworks and controls to emerging technologies, including AI and automation platforms

Extensive knowledge and understanding of security issues, techniques, and implications across multiple computer platforms

Demonstrated experience leading and developing others by providing technical guidance and leadership to project teams

Solid knowledge and understanding of security regulations and best practices such as the ISO 27000 family of standards

Solid knowledge and understanding of systems development life cycle (SDLC)

Demonstrated experience translating business requirements into architectural deliverables and technical specifications

Demonstrated experience communicating technical information to business clients and less experienced technologists

CISSP, CISM or equivalent

Experience with CI/CD pipelines

Cloud Architecture and/or Cloud Security Certifications (AWS, Azure, GCP)

Cloud Security Alliance (CCSP, CCSK) (ISC)2

Additional security certifications

Competencies:

Excellent analytical, problem-solving, customer service, project management and communication skills

Goal-oriented

Excellent oral and written communication skills, including technical and user documentation

Strong organizational skills

Ability to interact well with all levels of staff and coordinate with several teams to achieve objectives

Flexible and patient with process development/execution and adherence to instruct project management practices

Capable of grasping new concepts quickly and without prior experience

Ability to multi-task and work in fast-paced environment

Entrepreneurial by nature

Excellent attention to detail

Ability to organize, prioritize and coordinate multiple activities often under tight timelines

Ability to drive projects to completion and achieve goals

Strong judgment

Team-player with collaborative spirit

Unwavering ability to handle and maintain confidentiality regarding firm information, projects,

client data

High level of professionalism at all times

Proactive, analytical mindset

Effective presentation skills

Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE.

The expected annual pay range for this position with a full-time schedule is $120,000 - $175,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience.

We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.