Security Architect

King & Spalding is a leading global law firm with a commitment to excellence, innovation, and the seamless delivery of legal services. We harness innovative technology and exceptional talent to meet the complex needs of our clients in a fast-paced and dynamic legal landscape. 

We are seeking a skilled Security Architect to design, implement, and oversee security solutions that protect our organization’s infrastructure, applications, and data. The ideal candidate will have expertise across security domains and be skilled in designing enterprise-level technology and security solutions to meet current and future threat and risk imperatives. This individual will have deep expertise in cloud computing and cloud security and have hands-on experience across the breadth of Microsoft security and infrastructure stack. You will collaborate closely with IT teams, business stakeholders, and security and risk specialists to design and develop robust security frameworks and approaches, and to ensure that applications, infrastructure, identity, access, and networking plans are based in sound security standards and consideration of business objectives.   You will participate in development and execution of future-state cloud and security design and implementation activities to ensure consistency and standardization of security across our technology infrastructure.

KEY RESPONSIBILITIES:

• Design and implement security architectures and solutions with a focus on Microsoft Azure environments, and in concert with our full stack of security tools.
• Develop security documentation and best practices to support the protection of enterprise assets and data.
• Integrate and optimize solutions for secure web gateways, zero trust access, cloud security posture management, data protection, and other areas of security significance.
• Collaborate with IT, Security, and business stakeholders to ensure that IT projects and security solutions work in support of business objectives, while also reducing and managing technology and security risk.
• Participate in security and technology troubleshooting and analysis efforts.
• Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
• Ensure compliance with industry standards and regulations, such as NIST, ISO 27001, SOC 2, and GDPR.
• Stay updated on the latest security trends, technologies, and threat landscapes to continuously improve security posture.

QUALIFICATIONS:

• Bachelor’s Degree in a related field (or equivalent experience).
• 5+ years of experience in cybersecurity, with a focus on security tools, architecture, and cloud security.
• Expertise in Microsoft Azure Security Services, including Azure Security Center, Azure Sentinel, Azure AD, and Azure Firewall.
• Familiarity with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Knowledge of Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, and Defender for Office 365.
• Experience with Zero Trust Security models and frameworks.
• Proficiency in security tools such as SIEM, EDR, IAM, DLP, and network security solutions.
• Understanding security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls.
• Strong problem-solving skills with the ability to assess and mitigate security risks effectively.
• Excellent communication and stakeholder management skills.
• Security certifications such as CISSP, CCSP, or Azure Cloud Security certifications are preferred.
• Experience with automating security controls and scripting (PowerShell, Python, etc.) preferred.
• Knowledge of cloud automation templates, container security and securing modern application architectures in public cloud environments preferred.

The firm offers a generous total compensation package with bonuses and raises awarded in recognition of individual merit-based performance. All full-time Business Services employees may participate in King & Spalding’s comprehensive benefit program including health and wellness plan, life and disability insurance, flexible spending accounts and a health savings account, a 401(k) plan, profit sharing plan, and a substantial Paid Time Off (PTO) program.

Pay Transparency Range:

Washington, DC: The anticipated full-time annualized salary range is $200,000 - $275,000

The salary offer will be contingent upon various factors, including but not limited to, relevant experience, internal equity, market data, job location, and other job-related factors permitted by law. 

King & Spalding LLP (K&S) is committed to providing equal employment opportunity to all applicants and employees in full compliance with all state, federal, and local laws prohibiting discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, age, disability or any other status protected by applicable law. 

We are proud of our remarkably cohesive culture, which now encompasses more than 2,500 lawyers and business professionals worldwide. We seek to attract and develop the very best talent to work with us.