Security Engineer

At Legora, security is the foundation of the trust our customers place in us. The world’s leading law firms, as well as some of the biggest corporations use our platform for their most sensitive matters, and we need security to be built into how we design, ship, operate, and scale. We are looking for exceptional Security Engineers who can build leverage across a large surface area: a multi-tenant AI platform, a multi-cloud estate with Azure as our primary cloud, and an engineering organisation that ships fast. This is a hands-on engineering role. You will own security work end to end, build tooling and guardrails, embed with engineering teams, and make the secure path the default path.

Responsibilities

Own security work end to end: architecture, tooling, roadmap, and outcomes; Work embedded with engineering teams to make secure design, development, and operations the default; Build and ship software: guardrails, detections, libraries, automation, and workflows that live in git, are reviewed, tested, and deployed through CI/CD; Raise the security bar across engineering through design reviews, threat modelling, tooling, and enablement; Fix the class of bug, not just the instance, by turning findings into patterns, defaults, or detections; Secure a multi-tenant AI platform, including identity, authorisation, tenant isolation, data handling, and model-facing attack surfaces; Build with LLMs and agents, and help secure code and workflows produced at agent speed; Respond to incidents and write post-mortems that lead to meaningful technical and organisational improvements

Requirements

T-shaped security engineer with real depth in one of Application Security, Detection Engineering & Response, or Cloud & Platform Security, while staying credible across the others; Several years of engineering experience in your security specialisation; Real depth in vulnerabilities you have found, incidents you have run, systems you have hardened, or tooling you have built; Engineer who writes production-quality code, primarily in TypeScript/Node.js and Python; Comfortable operating across application security, detection and response, and cloud/platform security; Understand identity, authorisation, multi-tenancy, and where security boundaries tend to break; Communicate clearly and translate risk into engineering terms; Calm and structured under incident pressure and honest afterwards; Excited by a small team with a large surface area

Nice to have

Experience securing LLM-based or agentic products; Experience building a security function at a high-growth SaaS company; Familiarity with multi-tenant SaaS isolation models; Experience in environments with strict confidentiality, data residency, or professional secrecy requirements; Supply chain security depth, such as SLSA, artifact signing, or SBOMs