We are seeking a skilled Security Architect to design, implement, and oversee security solutions that protect our organization's infrastructure, applications, and data. The ideal candidate will have expertise in cloud security, particularly Microsoft Azure, along with experience in Zscaler and Microsoft Defender technologies. You will collaborate closely with IT teams, business stakeholders, and security operations/engineering to design and develop robust security frameworks and to ensure that applications, infrastructure, and networking plans adhere to security standards and business objectives and continue to mature our security posture. You will participate in development and execution of future-state cloud design and implementation activities to ensure consistency and standardization of security across our technology infrastructure.
KEY RESPONSIBILITIES:- Design and implement security architectures and solutions with a focus on Microsoft Azure environments, and in concert with our full stack of security tools.
- Develop security documentation and best practices to support the protection of enterprise assets and data.
- Integrate and optimize solutions for secure web gateways, zero trust access, cloud security posture management, data protection, and other areas of security significance.
- Collaborate with IT, Security, and business stakeholders to ensure that IT projects and security solutions work in support of business objectives, while also reducing and managing technology and security risk.
- Contribute to security response, analysis and investigative activities to establish root-cause and/or correlations logs, alerts, and other related data sources.
- Participate in security and technology troubleshooting and analysis efforts.
- Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
- Ensure compliance with industry standards and regulations, such as NIST, ISO 27001, SOC 2, and GDPR.
- Stay updated on the latest security trends, technologies, and threat landscapes to continuously improve security posture.
QUALIFICATIONS:- Bachelor's Degree in a related field (or equivalent experience).
- 5+ years of experience in cybersecurity, with a focus on security tools, architecture, and cloud security.
- Expertise in Microsoft Azure Security Services, including Azure Security Center, Azure Sentinel, Azure AD, and Azure Firewall.
- Familiarity with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
- Knowledge of Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, and Defender for Office 365.
- Experience with Zero Trust Security models and frameworks.
- Proficiency in security tools such as SIEM, EDR, IAM, DLP, and network security solutions.
- Understanding of security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls.
- Strong problem-solving skills with the ability to assess and mitigate security risks effectively.
- Excellent communication and stakeholder management skills.
- Security certifications such as CISSP, CCSP, or Azure Cloud Security certifications preferred.
- Experience with automating security controls and scripting (PowerShell, Python, etc.) preferred.
- Knowledge of cloud automation templates, container security and securing modern application architectures in public cloud environments preferred.
The firm offers a generous total compensation package with bonuses and raises awarded in recognition of individual merit-based performance. All full-time Business Services employees may participate in King & Spalding's comprehensive benefit program including health and wellness plan, life and disability insurance, flexible spending accounts and a health savings account, a 401(k) plan, profit sharing plan, and a substantial Paid Time Off (PTO) program.
Pay Transparency Range:
Washington, DC: Full-time annualized salary range $200,000 to $275,000. The salary offer will be contingent upon various factors, including but not limited to, relevant experience, internal equity, market data, job location, and other job-related factors permitted by law.
The salary offer will be contingent upon various factors, including but not limited to, relevant experience, internal equity, market data, job location, and other job-related factors permitted by law.
