Security Engineer

Job summary

Responsibilities

At Legora, security is the foundation of the trust our customers place in us. The world’s leading law firms, as well as some of the biggest corporations use our platform for their most sensitive matters, and we need security to be built into how we design, ship, operate, and scale.

• Own security work end to end: architecture, tooling, roadmap, and outcomes.
• Work embedded with engineering teams to make secure design, development, and operations the default.
• Build and ship software: guardrails, detections, libraries, automation, and workflows that live in git, are reviewed, tested, and deployed through CI/CD.
• Raise the security bar across engineering through design reviews, threat modelling, tooling, and enablement.
• Fix the class of bug, not just the instance, by turning findings into patterns, defaults, or detections.

What they're looking for

• Several years of engineering experience in your security specialisation, with real depth in vulnerabilities you have found, incidents you have run, systems you have hardened, or…
• You are an engineer who writes production-quality code; we work primarily in TypeScript/Node.js and Python.
• You are comfortable operating across application security, detection and response, and cloud/platform security, even if one of those areas is your main depth.
• You understand identity, authorisation, multi-tenancy, and where security boundaries tend to break.
• You communicate clearly, translate risk into engineering terms, and influence teams without relying on mandates.

Tech stack

• Azure
• TypeScript
• Node.js
• Python