Develop security documentation and best practices to support the protection of enterprise assets and data.
Integrate and optimize solutions for secure web gateways, zero trust access, cloud security posture management, data protection, and other areas of security significance.
Collaborate with IT, Security, and business stakeholders to ensure that IT projects and security solutions work in support of business objectives, while also reducing and managing technology and security risk.
Participate in security and technology troubleshooting and analysis efforts.
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Ensure compliance with industry standards and regulations, such as NIST, ISO 27001, SOC 2, and GDPR.
Stay updated on the latest security trends, technologies, and threat landscapes to continuously improve security posture.
QUALIFICATIONS
Bachelor’s Degree in a related field (or equivalent experience).
5+ years of experience in cybersecurity, with a focus on security tools, architecture, and cloud security.
Expertise in Microsoft Azure Security Services, including Azure Security Center, Azure Sentinel, Azure AD, and Azure Firewall.
Familiarity with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
Knowledge of Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, and Defender for Office 365.
Experience with Zero Trust Security models and frameworks.
Proficiency in security tools such as SIEM, EDR, IAM, DLP, and network security solutions.
Understanding security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls.
Strong problem-solving skills with the ability to assess and mitigate security risks effectively.
Excellent communication and stakeholder management skills.
Security certifications such as CISSP, CCSP, or Azure Cloud Security certifications are preferred.
Experience with automating security controls and scripting (PowerShell, Python, etc.) preferred.
Knowledge of cloud automation templates, container security and securing modern application architectures in public cloud environments preferred.
The firm offers a generous total compensation package with bonuses and raises awarded in recognition of individual merit-based performance. All full-time Business Services employees may participate in King & Spalding’s comprehensive benefit program including health and wellness plan, life and disability insurance, flexible spending accounts and a health savings account, a 401(k) plan, profit sharing plan, and a substantial Paid Time Off (PTO) program.
Pay Transparency Range
Washington, DC: The anticipated full-time annualized salary range is $200,000 - $275,000
The salary offer will be contingent upon various factors, including but not limited to, relevant experience, internal equity, market data, job location, and other job-related factors permitted by law.
King & Spalding LLP (K&S) is committed to providing equal employment opportunity to all applicants and employees in full compliance with all state, federal, and local laws prohibiting discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, age, disability or any other status protected by applicable law.
We are proud of our remarkably cohesive culture, which now encompasses more than 2,500 lawyers and business professionals worldwide. We seek to attract and develop the very best talent to work with us.
