Senior DevSecOps Engineer

Senior DevSecOps EngineerCooley AI is seeking a Sr. DevSecOps Engineer to join the Innovation team.

About Cooley AI: Cooley AI is the wholly-owned subsidiary of Cooley LLP. The frontier development arm of the leading technology law firm in the world. Our mission is to bring the best-in-class practices from the technology field into the legal domain to help lead our firm and the legal industry into the AI era. All employees of Cooley AI are employees of Cooley and are seconded to Cooley AI.

Position summary: As a leading technology law firm, Cooley is determined to become a leader in the digital practice of law. The DevSecOps Engineer is the primary hands-on builder of the platform infrastructure, CI/CD pipelines, and security tooling. The engineer will turn the architecture into working, automated systems that every developer inherits by default. Specific duties and responsibilities include, but are not limited to, the following:

Position responsibilities:

• Build and maintain secure, reusable infrastructure-as-code modules for cloud environments, including networking, computer, storage, identity, secrets, logging, and monitoring components
• Design, implement, and support CI/CD pipelines that automate build, test, security scanning, artifact management, release approval, and deployment workflows, including SAST, DAST, and penetration testing
• Configure observability and monitoring across the stack: infrastructure monitoring, APM, log pipelines, Cloud SIEM detection rules, and compliance dashboards
• Coordinate third-party pentests
• Build threat models for new features and products
• All other duties as assigned or required

Skills and experience:

Required:

• After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
• Ability to work extended and/or weekend hours, as required
• Ability to travel, as required
• 5+ years directly applicable experience in DevSecOps, cloud infrastructure engineering, platform engineering, or software delivery automation, with hands-on responsibility for infrastructure-as-code, CI/CD pipelines, cloud security tooling, and production deployment workflows
• Strong Terraform skills across AWS
• Experience building CI/CD pipelines in GitHub Actions (complex, multi-stage, with security gates)
• Hands-on with Snyk (or similar) integrated into developer workflows and CI
• Datadog configuration experience including log management and SIEM features
• Comfortable context-switching between IaC, IAM debugging, monitoring configuration, and pipeline troubleshooting

Preferred:

• Bachelor’s degree