Senior Innovation DevSecOps Engineer

Cooley is seeking a Sr. DevSecOps Engineer to join the Innovation team.

Position summary: As a leading technology law firm, Cooley is determined to become a leader in the digital practice of law. The DevSecOps Engineer is the primary hands-on builder of the platform infrastructure, CI/CD pipelines, and security tooling. The engineer will turn the architecture into working, automated systems that every developer inherits by default. Specific duties and responsibilities include, but are not limited to, the following:

Position responsibilities:

• Build and maintain secure, reusable infrastructure-as-code modules for cloud environments, including networking, computer, storage, identity, secrets, logging, and monitoring components
• Design, implement, and support CI/CD pipelines that automate build, test, security scanning, artifact management, release approval, and deployment workflows, including SAST, DAST, and penetration testing
• Configure observability and monitoring across the stack: infrastructure monitoring, APM, log pipelines, Cloud SIEM detection rules, and compliance dashboards
• Coordinate third-party pentests
• Build threat models for new features and products
• All other duties as assigned or required

Skills and experience:

Required:

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 5+ years directly applicable experience in DevSecOps, cloud infrastructure engineering, platform engineering, or software delivery automation, with hands-on responsibility for infrastructure-as-code, CI/CD pipelines, cloud security tooling, and production deployment workflows
• Strong Terraform skills across AWS
• Experience building CI/CD pipelines in GitHub Actions (complex, multi-stage, with security gates)
• Hands-on with Snyk (or similar) integrated into developer workflows and CI
• Datadog configuration experience including log management and SIEM features
• Comfortable context-switching between IaC, IAM debugging, monitoring configuration, and pipeline troubleshooting

Preferred:

• Bachelor’s degree
• Familiarity with SOC2 control expectations for change management and monitoring is a strong plus

Competencies:

• Entrepreneurial by nature
• Excellent attention to detail
• Exceptional interpersonal and communication skills with ability to facilitate and solve problems
• Ability to organize, prioritize and coordinate multiple activities often under tight timelines
• Ability to drive projects to completion and achieve goals
• Strong judgment
• Team-player with collaborative spirit
• Unwavering ability to handle and maintain confidentiality regarding firm information, projects,
• client data (if applicable)
• High level of professionalism at all times
• Demonstrated ability to lead through influence and develop talent [if applicable]
• Proactive, analytical mindset
• Effective presentation skills

Cooley LLP offers a competitive compensation and excellent benefits program. EOE.