Senior DevSecOps Engineer

Cooley AI•Washington, DC

4d•$165,000 - $215,000

About The Position

Cooley AI is seeking a Sr. DevSecOps Engineer to join the Innovation team. Cooley AI is the wholly-owned subsidiary of Cooley LLP, serving as the frontier development arm of a leading technology law firm. Our mission is to integrate best-in-class technology practices into the legal domain, guiding our firm and the legal industry into the AI era. All Cooley AI employees are employees of Cooley LLP and are seconded to Cooley AI. As a leading technology law firm, Cooley is committed to pioneering the digital practice of law. The DevSecOps Engineer will be the primary hands-on builder of the platform infrastructure, CI/CD pipelines, and security tooling, transforming architectural designs into automated systems for developer use.

Requirements

After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications
Ability to work extended and/or weekend hours, as required
Ability to travel, as required
5+ years directly applicable experience in DevSecOps, cloud infrastructure engineering, platform engineering, or software delivery automation, with hands-on responsibility for infrastructure-as-code, CI/CD pipelines, cloud security tooling, and production deployment workflows
Strong Terraform skills across AWS
Experience building CI/CD pipelines in GitHub Actions (complex, multi-stage, with security gates)
Hands-on with Snyk (or similar) integrated into developer workflows and CI
Datadog configuration experience including log management and SIEM features
Comfortable context-switching between IaC, IAM debugging, monitoring configuration, and pipeline troubleshooting

Nice To Haves

Bachelor’s degree
Familiarity with SOC2 control expectations for change management and monitoring is a strong plus
Entrepreneurial by nature
Excellent attention to detail
Exceptional interpersonal and communication skills with ability to facilitate and solve problems
Ability to organize, prioritize and coordinate multiple activities often under tight timelines
Ability to drive projects to completion and achieve goals
Strong judgment
Team-player with collaborative spirit
Unwavering ability to handle and maintain confidentiality regarding firm information, projects, client data (if applicable)
High level of professionalism at all times
Demonstrated ability to lead through influence and develop talent [if applicable]
Proactive, analytical mindset
Effective presentation skills

Responsibilities

Build and maintain secure, reusable infrastructure-as-code modules for cloud environments, including networking, computer, storage, identity, secrets, logging, and monitoring components
Design, implement, and support CI/CD pipelines that automate build, test, security scanning, artifact management, release approval, and deployment workflows, including SAST, DAST, and penetration testing
Configure observability and monitoring across the stack: infrastructure monitoring, APM, log pipelines, Cloud SIEM detection rules, and compliance dashboards
Coordinate third-party pentests
Build threat models for new features and products
All other duties as assigned or required