--- title: 'Cybersecurity Engineering & Operations Director at Onit, Inc.' canonical: 'https://feeny.ai/job/cybersecurity-engineering-operations-director-onit-inc-united-states-7e22yg4qheha' type: 'job' last_seen: '2026-10-16' --- # Cybersecurity Engineering & Operations Director at Onit, Inc. - **Company:** Onit, Inc. - **Location:** United States - **Compensation:** $150k–$190k - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-07 - **Last confirmed live:** 2026-10-16 - **Apply:** https://jobs.lever.co/onit/ab01e18f-5ca9-4d5e-8052-e251dba7eac3 ## Job description About Onit: We're redefining the future of legal operations through the power of AI. Our cutting-edge platform streamlines enterprise legal management, matter management, spend management and contract lifecycle processes, transforming manual workflows into intelligent, automated solutions. We’re a team of innovators using AI at the core to help legal departments become faster, smarter, and more strategic. As we continue to grow and expand the capabilities of our new AI-centric platform, we’re looking for bold thinkers and builders who are excited to shape the next chapter of legal tech. If you're energized by meaningful work, love solving complex problems, and want to help modernize how legal teams operate, we’d love to meet you. Key Responsibilities: - Develop and execute the cybersecurity engineering and operations strategy with the VP, Compliance and Security, translating risk and business priorities into technical roadmaps, architecture standards, and measurable outcomes (e.g., remediation performance, control coverage, incident response effectiveness, attack surface and posture trends). - Lead the design and continuous improvement of security controls and guardrails across AWS and corporate environments, including cloud identity, network, workload, container/Kubernetes, and data protections, with security automation delivered as code (Terraform, Python, CI/CD, policy-as-code). - Own technical security operations and incident response: detection, investigation, containment, eradication, and recovery; maintain and exercise IR plans, playbooks, and runbooks; build automated detection and response workflows across SIEM, SOAR, EDR, and cloud-native tooling; and coordinate executive, legal, and regulatory escalation with the VP. - Own the vulnerability and exposure management program across applications, cloud, endpoints, and external attack surfaces, setting risk-based remediation SLAs and prioritizing by exploitability, exposure, and business impact while driving root-cause fixes for systemic weaknesses. - Provide security leadership for Microsoft 365 and Entra ID (MFA, Conditional Access, privileged identity management, Just-In-Time access), corporate endpoint and email security, and for application and product security across the SDLC, including SAST/DAST/SCA, SBOMs, API security, threat modeling, a security champions program, and AI-enabled applications and integrations. - Lead, mentor, and develop the cybersecurity manager, engineers, and security operations staff; define team structure, career paths, and operating processes that scale; manage security vendors, penetration testing, and managed security services; and serve as senior technical security advisor to Engineering, IT, Product, and executive leadership. Required Skills: - 10+ years of progressive cybersecurity experience, including 5+ years in security leadership or management roles leading security engineering, security operations, or cloud security functions, with experience managing managers and technical teams. - Deep expertise securing cloud-native enterprise SaaS applications, with strong hands-on AWS security experience (IAM, VPC, EC2, RDS, S3, EKS/ECS, logging, monitoring) and strong knowledge of Linux, networking, containers, and Kubernetes. - Strong experience with security technologies including SIEM, EDR, CSPM, vulnerability management, WAF, and security monitoring platforms, and demonstrated experience building or improving incident detection and response programs. - Experience securing Microsoft 365 and Entra ID environments (identity protection, MFA, Conditional Access, privileged identity management, access governance) and implementing privileged access management and Just-In-Time access architectures. - Strong understanding of application and API security (SAST, DAST, SCA, SBOMs, secrets management, authentication/authorization) and experience with security automation and scripting using Python, Bash, Terraform, APIs, and CI/CD platforms, including Infrastructure-as-Code security and policy-as-code guardrails. - Hands-on AI tool proficiency: experience using AI tools and LLM-based assistants in security work (e.g., AI-assisted alert triage, investigation, detection engineering, and automation), including crafting effective prompts, evaluating output accuracy, and integrating AI into security workflows. Experience securing AI-enabled applications, LLM integrations, and APIs is a plus. - Ability to communicate complex cybersecurity risks to engineering leaders, executives, and non-technical stakeholders, and to balance risk reduction with business objectives and engineering velocity. - Preferred: experience with multi-tenant SaaS security, CrowdStrike, Cloudflare (WAF and Zero Trust), DevSecOps, and offensive security or red-team programs; familiarity with SOC 2, ISO 27001, NIST, or FedRAMP technical controls; and certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC. At Onit, we’re committed to offering fair and competitive compensation. In addition to base pay, associates are eligible for an annual discretionary bonus. The final base salary you receive will reflect factors such as your skills, education, experience, and work location. Benefits & Perks That Support You: Onit offers a comprehensive total rewards package designed to support the whole employee at work and beyond: Health Coverage Choices: Three medical plan options, plus dental and vision, so you can choose what fits best.  Employees on our HDHP plan also receive employer contribution to the HSA. Retirement Savings: 401(k) with a 100% match on the first 3% and 50% on the next 2% of employee contributions. Time Away: Flexible paid time off, 7 sick days, and 9 paid company holidays annually. Family Support: Exceptional paid leave for birth parents, non-birth parents, and caregivers.  Onit also offers surrogacy and adoption reimbursement. Income Protection: 100% employer-paid life and disability insurance. Additional Coverage Options: Voluntary benefits including hospital indemnity, critical illness, accident, and even pet insurance. Tax-Advantaged Accounts: Healthcare FSA, HSA, and dependent care FSA. Community Engagement: One paid volunteer day each year to give back to the community. Our Commitment to Applicants We know that not everyone will check every box in a job description. At Onit, we value diversity, inclusion, and authenticity. If you’re excited about this role but your experience doesn’t align perfectly with every qualification, we encourage you to apply. You may be exactly who we’re looking for. This position will remain open for applications for 7 calendar days from the posting date. ## About Onit, Inc. ## Company Overview - **One-liner**: Onit is an AI-native legal operations platform that helps legal and compliance teams manage workflows, contracts, matters, and spend. - **Entity Type**: Private (late‑stage; $216.6M total funding over 11 rounds) - **Headquarters**: Atlanta, Georgia, United States - **Founded**: 2009 (company site) – some sources list 2011 (LinkedIn); conflicting reports exist. - **Founders**: Not publicly disclosed ## Core Business - **Primary Industry**: Legal technology (legal operations software) - **Target Customers**: B2B, primarily legal and compliance departments in enterprise, Fortune 500, and high‑growth companies - **Mission / Purpose**: To give legal teams the freedom, flexibility, and technology to run their departments on their own terms, transforming legal business processes with purpose‑built, AI‑native solutions. ## Products & Services - **Enterprise Legal Management (ELM)**: Full‑lifecycle matter, spend, and vendor management – SaaS platform - **Contract Lifecycle Management (CLM)**: AI‑powered contract creation, review, negotiation, and storage - **Intake & Workfloow Automation**: Configurable service‑request portals and approval chains - **AI Agents & Assistant**: Generative‑AI tools that automate contract redlining, clause policy checks, and answers from corporate policies All products are unified under a single, adaptable framework. ## Market Standing - **Valuation / Market Cap**: Not publicly disclosed - **Key Metric**: Annual revenue ~$78.3M (LinkedIn estimate) – note: this is a third‑party estimate, not official. - **Total Funding**: $216.6M (11 rounds; latest round not specified) - **Notable Investors / Partners**: Not disclosed in available sources (investor names not found) - **Growth Signals**: 3,000+ customers worldwide; 389 employees (+13.3% YoY); LinkedIn followers 63,694 (+50.3% YoY); multiple acquisitions; rapid scaling of AI‑native products. ## Competitive Advantages - **AI‑native Architecture**: Built from the ground up to leverage AI, not bolted‑on. - **Domain Expertise**: Created by legal professionals for legal teams – deep understanding of legal workfloows. - **Configurability**: Highly adaptable platform that allows legal departments to shape the software to their processes. - **Scale & Trust**: Trusted by over 3,000 customers including Fortune 500 enterprises – demonstrated retention and market penetration. ## Strategic Focus - **AI‑First Innovation**: Continuing to embed AI agents and generative capabilities across the platform. - **Acquisitions**: Using M&A to broaden product portfolio and accelerate growth. - **Global Expansion**: Growing presence in key regions (New Zealand, Ukaine, Uk, India) while maintaining a remote‑first culture. - **Customer Success**: Deepening relationships and driving value through automation and insights. ## Why Work Here - **Culture Highlights**: Recognized as a *Most Loved Workplace*; values include Customers First, Purposeful Innovation, Win as One, and Intentional Growth. - **Remote / Hybrid**: Remote work is embraced, monitored by performance not micro‑management. Office hubs in Atlanta, Pune, New Zealand, Ukaine, and United Kingdom. - **Benefits**: - 24‑wekks paid leave for all new parents (adoption/surrogacy included) from Day 1 - Company‑wide bonus plans (minimum 6% for all levels) - Quarterly performance reviews focused on growth dialogue - Multiple internal collaboration platforms (AwardCo, The Wave, intranet, townhalls, AMAs) - **Engineering Culture**: Emphasis on modern tech stack (Microsoft‑centric, Python, Ruby on Rails), AI engineering roles visible – Senior AI Engineer, Lead Software Engineer – Python, AI Engineer, Senior Software Engineer – RoR. ## Sources 1. [onit.com/careers](https://www.onit.com/careers/); culture, benefits, and values 2. [onit.com/about](https://www.onit.com/about-onit/); company overview, history, mission, products 3. [linkedin.com/company/onit](https://www.linkedin.com/company/onit/); employee count, revenue estimate, founding year, funding 4. [mostlovedworkplace.com/companies/onit](https://mostlovedworkplace.com/companies/onit/); benefits, remote policy, values, awards 5. [onit.com/leadership](https://www.onit.com/leadership/); leadership mention (Farlekas) ## Other roles at Onit, Inc. - [Quality Assurance Engineer](https://feeny.ai/job/quality-assurance-engineer-onit-inc-pune-c7trx1bwfa77) — Pune, India - [Lead Quality Assurance Engineer](https://feeny.ai/job/lead-quality-assurance-engineer-onit-inc-pune-j5jptra80j9r) — Pune, India - [Senior Product Designer](https://feeny.ai/job/senior-product-designer-onit-inc-pune-r2n7g7hym9f4) — Pune, India - [Assistant Controller](https://feeny.ai/job/assistant-controller-onit-inc-united-states-a4anckepmtj6) — United States