--- title: '(Senior OR Staff) Detection & Response Engineer at Legora' canonical: 'https://feeny.ai/job/senior-or-staff-detection-response-engineer-legora-new-york-2r8hpxdbzgsm' type: 'job' last_seen: '2026-11-06' --- # (Senior OR Staff) Detection & Response Engineer at Legora - **Company:** [Legora](https://feeny.ai/companies/legora) - **Location:** New York, NY - **Compensation:** $187k–$329k - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-09-09 - **Last confirmed live:** 2026-11-06 - **Apply:** https://jobs.ashbyhq.com/legora/e30a83fd-f911-4564-bbfa-68c98c68d08f ## Job description ## About Us Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. - We lean in: ownership over titles, outcomes over intentions. - We fight for excellence: high standards, direct, ego-free feedback. - We grow together: as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. ## About the team The IT and AI Enablement function helps Legora run securely and reliably as we grow. We are building an AI-native Information Security function. We ship security controls as software, and agents handle first-pass triage and routine investigation. People make the high-impact calls. This role owns detection and response across Legora's corporate and production environments: endpoints, identity, cloud workloads, SaaS, and the AI systems and agents we operate. Law firms trust Legora with sensitive work, so we expect capable, well-resourced attackers. Your job is to find and stop them. ## What you’ll be doing - Own detection and response across endpoints, identity, cloud workloads, SaaS, and Legora's AI systems. Hunt, triage, investigate, contain, and drive incidents through resolution, then turn what you learn into better detections and controls. - Build detections as production software on telemetry and pipelines provided by AI & Integrations Engineering. Keep them version-controlled, peer-reviewed, tested, and deployed through CI/CD. Measure coverage, precision, and time to detection, then tune where the data shows a gap. - Build threat models, telemetry, and response playbooks for our AI systems, agents, and their tool use. Detect misuse of agents operating across the company. - Build and supervise agents for triage, enrichment, and investigation. Set guardrails and approval thresholds for containment and other high-impact actions. - Map coverage to MITRE ATT&CK and validate it through threat hunting, penetration-test findings, and adversary emulation. - Share the on-call rotation and act as incident commander when security is involved. Engineering owns service reliability; Customer Trust and Legal own customer communications. Run post-incident reviews and use the findings to reduce detection and containment time. - Investigate insider risk and identity abuse with Corporate Security, People, and Legal. Work with Vulnerability Management on exposure priorities and IT Systems on the underlying estate. - Track actors and campaigns targeting AI companies and convert the intelligence into hunts and detections. Own the digital-risk platform and coordinate urgent phishing and impersonation takedowns. ## Who you are - 5+ years in detection engineering, incident response, or security operations, including work as a senior escalation point. For Staff, we expect roughly 10+ years and experience setting detection and response strategy. - Strong software engineering skills in Python and SQL. You build detections, automations, and telemetry pipelines that run reliably in production. - You use LLMs and agents in day-to-day security work and know which decisions require a human. Be ready to show us an investigation or workflow you automated. - Fluent across endpoint, identity, cloud, and SaaS telemetry. You reason from attacker behaviour and correlate signals across systems. - You communicate clearly during incidents and turn incomplete technical evidence into sound decisions. Your post-incident reviews lead to concrete changes. ## Nice to have - Experience with a modern SIEM or security data lake and at least two relevant query or rule languages, such as SPL, KQL, YARA-L, Sigma, or SQL. - Experience securing AI systems, agent tool use, and AI data flows, including prompt injection and exfiltration risks. - Experience with response automation, incident management, digital forensics, or malware analysis. - Threat intelligence, insider risk, or DLP experience. What’s In It For You - Global collaboration: Partner with teams and clients across Europe, APAC, and North America. - Competitive package: Comprehensive salary, benefits, and tools for success. - Meaningful work: Your efforts shape how thousands of lawyers use AI daily. - In-person environment: Union Square office designed for ambitious builders and company provided lunch daily. - Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision - Multiple medical plan options through Aetna and Kaiser Permanente - HSA or Healthcare FSA (based on plan selection) - Dental plans via MetLife - Vision plans via Vision Care Family Support - Generous parental leave - Free access to Maven Clinic - Dependent Care FSA - Free One Medical membership for employees and dependents Additional Perks - Pre-tax commuter benefits - Life Insurance + STD/LTD - 401(K) with generous company match - Unlimited PTO - Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more Legora is an Equal Opportunity Employer At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law. ## About Legora ## Company Overview - **One-liner**: Legora builds a collaborative AI workspace that empowers legal professionals to review, draft, research, and advise with greater speed and precision. - **Entity Type**: Private (Series D; total funding $865.6M) - **Headquarters**: Stockholm, Sweden - **Founded**: 2023 - **Founders**: Max Junestrand (Co-founder & CEO) ## Core Business - **Primary industry**: Legal Technology (Legal AI) - **Target customers**: Law firms and in-house legal teams (B2B/Enterprise) - **Mission or purpose statement**: "To empower exceptional lawyers" by building the world's first truly collaborative AI for legal work [legora.com/about]. ## Products & Services - **Legora aOS (Agentic Operating System)**: A single platform that connects information, communication, and execution of legal work. Integrates AI agents, monitoring, and workflow tools. - **Agent**: An end-to-end executor that plans, reviews, and delivers complex legal tasks, allowing lawyers to focus on judgment-intensive decisions. - **Monitors**: Continuously scans global regulation and surfaces relevant changes. - **Lists**: Organises legal work from documents and connects AI outputs to workflows. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Annual Revenue of $50.0M (LinkedIn estimate); Total Funding of $865.6M across 5 rounds (Seed, Series A, B, C, D). - **Notable Investors/Partners**: Accel, Bessemer Venture Partners, ICONIQ, General Catalyst, Benchmark, Redpoint, Y Combinator. Recent Series D (April 2026, $600M) included 23 investors. - **Growth Signals**: 352 employees (+528.8% YoY); 1,000+ customers in 30+ markets; acquired Qura and Walter. Active job postings up 1308% year-over-year (169 open roles). ## Competitive Advantages - **Deep legal domain AI**: Purpose-built for legal workflows rather than general-purpose LLMs. - **Security & compliance**: ISO 27001, ISO 42001, SOC 2 Type II, GDPR, HIPAA certified – critical for law firm adoption. - **Agentic approach**: End-to-end execution of complex legal work, reducing non-billable hours by an average of 30%. ## Strategic Focus - **Building the "OS for legal work"** – a single system connecting information, communication, and execution. - Expanding globally with offices in 16 countries (US, UK, Australia, India, Denmark, etc.). - Deepening AI governance (ISO 42001) to maintain trust and regulatory readiness. ## Why Work Here - **Culture**: Values include "lean in," "fight for excellence," "grow together," and "curiosity and clarity." Emphasis on transparency, speed, and real impact over hierarchy [legora.com/careers]. - **Work environment**: Highly collaborative – "collaboration isn’t a process, it’s our foundation" [legora.com/about]. Hybrid/office presence likely given multiple locations; exact policy not specified. - **Engineering focus**: Roles span software engineering, AI, site reliability, and product design. Hiring process includes a case presentation and a final interview with the CEO. - **Perks**: Not explicitly detailed, but employer rating is 4.4/5 (Work-Life: 4.5, Compensation: 5.0, Culture: 4.4, Career: 4.4) from 9 reviews on LinkedIn. ## Sources 1. [Legora Careers Page](https://legora.com/careers) 2. [Legora Official Site](https://legora.com/) 3. [Legora About Page](https://legora.com/about) 4. [Legora LinkedIn Company Page](https://www.linkedin.com/company/wearelegora) ## Other roles at Legora - [Accounting Engineer - Stockholm](https://feeny.ai/job/accounting-engineer-stockholm-legora-stockholm-zywdmxdyvhmz) — Stockholm, Sweden - [Legal Engineer - Banking & Financial Services](https://feeny.ai/job/legal-engineer-banking-financial-services-legora-sydney-fbvf3gcthjx8) — Sydney, Australia - [ビジネス・デベロップメント・レプレゼンタティブ (Business Development Representative)](https://feeny.ai/job/business-development-representative-legora-tokyo-1hc45589rbde) — Tokyo, Japan - [Compensation Analyst](https://feeny.ai/job/compensation-analyst-legora-new-york-xhxsfwrygz2g) — New York, NY - [GTM SMB Director, EMEA](https://feeny.ai/job/gtm-smb-director-emea-legora-stockholm-cbe1kegv2rep) — Stockholm, Sweden - [Senior Manager, People Advisors](https://feeny.ai/job/senior-manager-people-advisors-legora-london-y9we3tnxsg8f) — London, United Kingdom - [Engagement Associate](https://feeny.ai/job/engagement-associate-legora-london-manyqbe4kgkk) — London, United Kingdom - [Manager, People Operations](https://feeny.ai/job/manager-people-operations-legora-stockholm-95f5t1znzezq) — Stockholm, Sweden - [Engagement Manager - Enterprise Corporates](https://feeny.ai/job/engagement-manager-enterprise-corporates-legora-london-7n2nd4esgprc) — London, United Kingdom - [Software Engineering - Product](https://feeny.ai/job/software-engineering-product-legora-stockholm-yh1c0445f4wb) — Stockholm, Sweden