Senior DevSecOps Engineer

About Cooley AI

Cooley AI is the wholly-owned subsidiary of Cooley LLP, the frontier development arm of the leading technology law firm in the world. Its mission is to bring best-in-class technology practices into the legal domain to help lead the firm and the legal industry into the AI era. All employees of Cooley AI are employees of Cooley and are seconded to Cooley AI.

Position Summary

As a leading technology law firm, Cooley is determined to become a leader in the digital practice of law. The DevSecOps Engineer is the primary hands-on builder of the platform infrastructure, CI/CD pipelines, and security tooling. The engineer will turn the architecture into working, automated systems that every developer inherits by default.

Responsibilities

• Build and maintain secure, reusable infrastructure-as-code modules for cloud environments, including networking, compute, storage, identity, secrets, logging, and monitoring components
• Design, implement, and support CI/CD pipelines that automate build, test, security scanning, artifact management, release approval, and deployment workflows, including SAST, DAST, and penetration testing
• Configure observability and monitoring across the stack: infrastructure monitoring, APM, log pipelines, Cloud SIEM detection rules, and compliance dashboards
• Coordinate third-party pentests
• Build threat models for new features and products
• All other duties as assigned or required

Required Skills and Experience

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 5+ years directly applicable experience in DevSecOps, cloud infrastructure engineering, platform engineering, or software delivery automation, with hands-on responsibility for infrastructure-as-code, CI/CD pipelines, cloud security tooling, and production deployment workflows
• Strong Terraform skills across AWS
• Experience building CI/CD pipelines in GitHub Actions (complex, multi-stage, with security gates)
• Hands-on with Snyk (or similar) integrated into developer workflows and CI
• Datadog configuration experience including log management and SIEM features
• Comfortable context-switching between IaC, IAM debugging, monitoring configuration, and pipeline troubleshooting

Preferred Qualifications

• Bachelor’s degree
• Familiarity with SOC2 control expectations for change management and monitoring is a strong plus

Competencies

• Entrepreneurial by nature
• Excellent attention to detail
• Exceptional interpersonal and communication skills with ability to facilitate and solve problems
• Ability to organize, prioritize and coordinate multiple activities often under tight timelines
• Ability to drive projects to completion and achieve goals
• Strong judgment
• Team-player with collaborative spirit
• Unwavering ability to handle and maintain confidentiality regarding firm information, projects, client data (if applicable)
• High level of professionalism at all times
• Demonstrated ability to lead through influence and develop talent (if applicable)
• Proactive, analytical mindset
• Effective presentation skills

Benefits

Cooley LLP offers a competitive compensation and excellent benefits program.

• Medical, health savings account (with applicable medical plan), dental, vision
• Health and/or dependent care flexible spending accounts
• Pre-tax commuter benefits
• Life insurance, AD&D