--- title: 'Corporate Security Engineer at Legora' canonical: 'https://feeny.ai/job/corporate-security-engineer-legora-new-york-r658bgjzza1x' type: 'job' last_seen: '2026-09-11' --- # Corporate Security Engineer at Legora - **Company:** [Legora](https://feeny.ai/companies/legora) - **Location:** New York, NY - **Compensation:** $188k–$254k - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-07-25 - **Last confirmed live:** 2026-09-11 - **Apply:** https://jobs.ashbyhq.com/legora/f80f50f8-df35-472b-b67d-7290f97d4faa ## Job description ## About Us Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. - We lean in: ownership over titles, outcomes over intentions. - We fight for excellence: high standards, direct, ego-free feedback. - We grow together: as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. ## About the team The IT and AI Enablement function exists to make Legora itself run as well as the product we sell: secure, automated, and compounding over time. Legora builds AI that law firms trust with their most sensitive work, which makes us a target for capable, well-resourced adversaries. Information Security keeps that trust intact, builders-first and AI-first: we ship controls as software and let agents take the first pass, so the human work is the judgment layer. We are not looking for someone to administer consoles and work a compliance checklist. The Corporate Security Engineer owns the security of Legora’s own environment — the identities, devices, SaaS, and AI tools every employee depends on — the operating root of trust the rest of the company connects through. ## What you’ll be doing - Own non-human identity — the service accounts, agents, and workloads that scale faster than headcount. Keep them inventoried and owned, scoped tightly, running on short-lived and secretless credentials, with a path to revoke at scale. - Set the authorization model for agents — scoped, revocable, and auditable: least-privilege at each MCP call, no token passthrough, and delegated authority rather than standing access. - Secure how Legora uses AI — govern employee use of LLMs and agents, keep client data on sanctioned paths, and make the safe path the fast one as teams adopt AI. - Advance identity for people — phishing-resistant MFA (passkeys / FIDO2), SSO, SCIM lifecycle, and least-privilege / just-in-time access across Google Workspace, Slack, Notion, and the SaaS estate — and cover the attack classes that defeat MFA alone — session / token theft, adversary-in-the-middle phishing, OAuth consent abuse — with continuous access evaluation to revoke live sessions on risk. - Raise the bar on SaaS security posture (SSPM) — configurations held to clear benchmarks, and risky OAuth grants, over-permissioned or stale admins, shadow SaaS / AI, and config drift surfaced continuously — the technical lens on the portfolio the SaaS Enablement & Governance Lead holds the system of record for. - Own endpoint and device trust — an Apple-first fleet on MDM and EDR, with access gated on device health via zero-trust / conditional access, partnering with IT Systems and Workplace Technology, who run the fleet and network. - Own data-protection controls (DLP) across endpoint, SaaS, browser, and AI-egress, run access reviews, and surface insider-risk signals to Detection & Response for investigation with People and Legal. - Build controls and guardrails as code (Python + Terraform / IaC) so security scales, tracked against agent-identity and MFA coverage, risky OAuth grants closed, and mean time to remediate and revoke. ## Who you are - 4+ years in corporate, enterprise, or IT security, with full ownership of security decisions and scope end to end. - A builder first — you write production-grade code (Python at least) and treat controls, automations, and detections as software you own, not tickets you close. - AI-first by conviction — you already reach for agents and LLMs (Claude Code and the like) to compress toil, and you have a clear view on where they’re trustworthy and where a human owns the call. Show us something you automated that used to eat your week. - Identity-, SaaS-, and AI-centric in how you think about security — the modern attack surface (identity as the new perimeter, the SaaS estate, endpoints, and the AI tools employees use), not network-perimeter or compliance-checklist. - Fluent with modern identity — an enterprise IdP (Okta and/or Microsoft Entra ID) and Google Workspace, SSO and SCIM lifecycle, phishing-resistant MFA, and the protocols underneath (SAML, OAuth 2.0, OIDC). - Energised by the threat model — you find it motivating, not daunting, that securing an AI company law firms trust with their most sensitive work means well-resourced adversaries and novel attack surface. ## Nice to have - Securing AI systems — prompt-injection and exfiltration detection, agent / tool-use telemetry, and the OWASP LLM Top 10. - Identity threat detection (ITDR) and SaaS-identity tooling — Okta / Microsoft Entra ID Protection and e.g. Push Security. - Non-human identity and secrets — service-account governance, workload identity, and secrets management (e.g. 1Password, HashiCorp Vault). - Agent authorization — delegated authority and short-lived, narrowly-scoped tokens (OAuth token exchange / identity chaining), and MCP enterprise-managed authorization. - Endpoint at scale — Jamf (Apple) and Intune (Windows), with modern EDR. - Security automation and guardrails-as-code — deterministic workflows and SOAR (e.g. Tines, Torq). - DLP and insider-risk tooling — modern data-loss prevention and UEBA. - SOC 2 / ISO 27001 control implementation and compliance-as-code alongside engineering — GRC owns the certifications, you build and evidence the technical controls. - Experience with Okta, Microsoft Entra ID, 1Password, CrowdStrike, Jamf, Lumos, and our AI-native ITSM (Serval). What’s In It For You - Global collaboration: Partner with teams and clients across Europe, APAC, and North America. - Competitive package: Comprehensive salary, benefits, and tools for success. - Meaningful work: Your efforts shape how thousands of lawyers use AI daily. - In-person environment: Union Square office designed for ambitious builders and company provided lunch daily. - Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision - Multiple medical plan options through Aetna and Kaiser Permanente - HSA or Healthcare FSA (based on plan selection) - Dental plans via MetLife - Vision plans via Vision Care Family Support - Generous parental leave - Free access to Maven Clinic - Dependent Care FSA - Free One Medical membership for employees and dependents Additional Perks - Pre-tax commuter benefits - Life Insurance + STD/LTD - 401(K) with generous company match - Unlimited PTO - Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more Legora is an Equal Opportunity Employer At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law. ## About Legora ## Company Overview - **One-liner**: Legora builds a collaborative AI workspace that empowers legal professionals to review, draft, research, and advise with greater speed and precision. - **Entity Type**: Private (Series D; total funding $865.6M) - **Headquarters**: Stockholm, Sweden - **Founded**: 2023 - **Founders**: Max Junestrand (Co-founder & CEO) ## Core Business - **Primary industry**: Legal Technology (Legal AI) - **Target customers**: Law firms and in-house legal teams (B2B/Enterprise) - **Mission or purpose statement**: "To empower exceptional lawyers" by building the world's first truly collaborative AI for legal work [legora.com/about]. ## Products & Services - **Legora aOS (Agentic Operating System)**: A single platform that connects information, communication, and execution of legal work. Integrates AI agents, monitoring, and workflow tools. - **Agent**: An end-to-end executor that plans, reviews, and delivers complex legal tasks, allowing lawyers to focus on judgment-intensive decisions. - **Monitors**: Continuously scans global regulation and surfaces relevant changes. - **Lists**: Organises legal work from documents and connects AI outputs to workflows. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Annual Revenue of $50.0M (LinkedIn estimate); Total Funding of $865.6M across 5 rounds (Seed, Series A, B, C, D). - **Notable Investors/Partners**: Accel, Bessemer Venture Partners, ICONIQ, General Catalyst, Benchmark, Redpoint, Y Combinator. Recent Series D (April 2026, $600M) included 23 investors. - **Growth Signals**: 352 employees (+528.8% YoY); 1,000+ customers in 30+ markets; acquired Qura and Walter. Active job postings up 1308% year-over-year (169 open roles). ## Competitive Advantages - **Deep legal domain AI**: Purpose-built for legal workflows rather than general-purpose LLMs. - **Security & compliance**: ISO 27001, ISO 42001, SOC 2 Type II, GDPR, HIPAA certified – critical for law firm adoption. - **Agentic approach**: End-to-end execution of complex legal work, reducing non-billable hours by an average of 30%. ## Strategic Focus - **Building the "OS for legal work"** – a single system connecting information, communication, and execution. - Expanding globally with offices in 16 countries (US, UK, Australia, India, Denmark, etc.). - Deepening AI governance (ISO 42001) to maintain trust and regulatory readiness. ## Why Work Here - **Culture**: Values include "lean in," "fight for excellence," "grow together," and "curiosity and clarity." Emphasis on transparency, speed, and real impact over hierarchy [legora.com/careers]. - **Work environment**: Highly collaborative – "collaboration isn’t a process, it’s our foundation" [legora.com/about]. Hybrid/office presence likely given multiple locations; exact policy not specified. - **Engineering focus**: Roles span software engineering, AI, site reliability, and product design. Hiring process includes a case presentation and a final interview with the CEO. - **Perks**: Not explicitly detailed, but employer rating is 4.4/5 (Work-Life: 4.5, Compensation: 5.0, Culture: 4.4, Career: 4.4) from 9 reviews on LinkedIn. ## Sources 1. [Legora Careers Page](https://legora.com/careers) 2. [Legora Official Site](https://legora.com/) 3. [Legora About Page](https://legora.com/about) 4. [Legora LinkedIn Company Page](https://www.linkedin.com/company/wearelegora) ## Other roles at Legora - [Senior Talent Acquisition Partner, Engineering](https://feeny.ai/job/senior-talent-acquisition-partner-engineering-legora-london-7bh068ard4nb) — London, United Kingdom - [Strategic Programs Manager](https://feeny.ai/job/strategic-programs-manager-legora-new-york-59fge02vt3g5) — New York, NY - [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-legora-london-yge34em2hk2x) — London, United Kingdom - [Director of Partnerships APJ](https://feeny.ai/job/director-of-partnerships-apj-legora-sydney-p7116nchk9ae) — Sydney, Australia - [GTM Compensation, Planning & Performance Analyst](https://feeny.ai/job/gtm-compensation-planning-performance-analyst-legora-new-york-she27raabb6r) — New York, NY - [Senior Accountant](https://feeny.ai/job/senior-accountant-legora-new-york-xy2ya1zjnm02) — New York, NY - [Performance Marketing Manager](https://feeny.ai/job/performance-marketing-manager-legora-new-york-ck78favb5rxr) — New York, NY - [Executive Recruiter](https://feeny.ai/job/executive-recruiter-legora-new-york-bkxd7wnx4790) — New York, NY - [Senior Visual Designer - Product Marketing](https://feeny.ai/job/senior-visual-designer-product-marketing-legora-stockholm-cmnb0xkcmk91) — Stockholm, Sweden - [(Senior OR Staff) Detection & Response Engineer](https://feeny.ai/job/senior-or-staff-detection-response-engineer-legora-new-york-2r8hpxdbzgsm) — New York, NY