Technology Cyber Security Architect Cooley is seeking a Cyber Security Architect to join the technology team.
Position summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end, the Cyber Security Architect will work to maintain and monitor the security practices and systems implemented by the firm. The Cyber Security Architect will proactively identify and mitigate cyber threats to protect our organization s assets with a focus on emerging technologies and artificial intelligence (AI) security. Working collaboratively with Technology and Innovation teams, the position will design advanced security architecture and threat detection techniques. Specific duties and responsibilities include, but are not limited to, the following:
Position responsibilities:
Design and maintain enterprise security architecture across on-premises, hybrid, and AI-enabled environments
Define security standards, patterns, and reference architectures aligned with business objectives and regulatory requirements
Conduct security architecture reviews for new systems, applications, AI/ML platforms, and major technology changes
Partner with engineering, infrastructure, DevOps, and data teams to embed security, privacy, and governance into system design and delivery
Design security controls for AI and ML systems, including data pipelines, model training environments, inference platforms, and AI integrations
Identify and mitigate risks related to AI systems, such as data leakage, model poisoning, prompt injection, and adversarial attacks
Evaluate and recommend security tools, platforms, and AI-enabled security technologies
Ensure architectures comply with applicable legal, regulatory, and industry frameworks (e.g., NIST, ISO 27001, SOC 2, GDPR, emerging AI regulations)
Establish guardrails for responsible and secure use of generative AI and large language models, including access controls, monitoring, logging, and auditability
Support incident response, forensic investigations, and post-incident architecture improvements
Provide guidance and mentorship to security engineers and other technical stakeholders
Communicate architectural decisions and security risks clearly to technical and non-technical audiences, including senior leadership
Required to participate in a 7x24 on-call rotation
All other duties as assigned or required
Skills and experience:
Required :
After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
Ability to work extended and/or weekend hours, as required
Ability to travel, as required
3 years direct applicable experience (e.g., cybersecurity, infrastructure, or systems architecture). Senior level candidates considered with 5 years direct applicable experience.
Strong knowledge of network security, identity and access management (IAM), encryption, and endpoint security
Ability to translate business requirements into secure technical designs
Extensive knowledge and experience with the configuration of security controls and secure migration of enterprise applications
Experience with implementing security tools and architecture such as:
Access Controls
Data Loss Prevention (DLP)
Web Application Firewalls (WAF)
Secure SDLC and Software Security
Firewalls
Anti-malware and anomaly detection controls
Data encryption in transit and at rest
Network security
Monitoring
Experience with a formal requirements definition
Preferred :
Bachelor’s Degree in Information Technology, Computer Information Systems, Computer Science, Information Security, or related discipline
Familiarity with security frameworks and best practices (NIST CSF, Mitre ATT&CK, Zero Trust, OWASP, emerging AI regulations)
Familiarity with common security controls in the enterprise (Firewall, Proxy, AV, SIEM, etc.)
Experience with incident response procedures
Working knowledge of securing AI-enabled applications and services, including data access controls, model integration, and API security
Experience applying existing security frameworks and controls to emerging technologies, including AI and automation platforms
Extensive knowledge and understanding of security issues, techniques, and implications across multiple computer platforms
Demonstrated experience leading and developing others by providing technical guidance and leadership to project teams
Solid knowledge and understanding of security regulations and best practices such as the ISO 27000 family of standards
Solid knowledge and understanding of systems development life cycle (SDLC)
Demonstrated experience translating business requirements into architectural deliverables and technical specifications
Demonstrated experience communicating technical information to business clients and less experienced technologists
CISSP, CISM or equivalent
Experience with CI/CD pipelines
Cloud Architecture and/or Cloud Security Certifications (AWS, Azure, GCP)
Cloud Security Alliance (CCSP, CCSK) (ISC)2
Additional security certifications
Competencies :
Excellent analytical, problem-solving, customer service, project management and communication skills
Goal-oriented
Excellent oral and written communication skills, including technical and user documentation
Strong organizational skills
Ability to interact well with all levels of staff and coordinate with several teams to achieve objectives
Flexible and patient with process development/execution and adherence to instruct project management practices
Capable of grasping new concepts quickly and without prior experience
Ability to multi-task and work in fast-paced environment
Entrepreneurial by nature
Excellent attention to detail
Ability to organize, prioritize and coordinate multiple activities often under tight timelines
Ability to drive projects to completion and achieve goals
Strong judgment
Team-player with collaborative spirit
Unwavering ability to handle and maintain confidentiality regarding firm information, projects,
client data
High level of professionalism at all times
Proactive, analytical mindset
Effective presentation skills
Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE.
The expected annual pay range for this position with a full-time schedule is $120,000 - $175,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience.
We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off (“PTO”) and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.