Security Engineering Director

Job description

## About Us Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to **$100M+ in ARR**, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. - We **lean in:** ownership over titles, outcomes over intentions. - We **fight for excellence:** high standards, direct, ego-free feedback. - We **grow together:** as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. **The role** At Legora, security is the foundation of the trust our customers place in us. The world's leading law firms and largest corporations use our platform for their most sensitive matters. The risk of breach is very high, and we treat it that way. We are building an engineering-led security function: secure defaults, paved roads, automation, and measurable risk reduction not advisory gates or ticket queues. We need a Director of Security Engineering to **set the direction for security across our product, platform, and cloud estate; build and lead the team; and tackle systemic problems rather than continually react to individual ones.** You will work closely with engineering leadership to anticipate challenges, influence architecture and priorities, and make blockers and consequences clear. This role can be based in Stockholm or New York. It is a 5-day in-office role we believe building together in person drives better outcomes. **What you will be doing** Security strategy and architecture - Define the security standard across Legora's product, platform, and customer commitments. - Set the roadmap and investment priorities, **looking ahead and identifying emerging risks and blockers early.** - Partner with the CTO and engineering leadership on architecture and technical direction. Engineering enablement - Build tools, paved paths, and secure defaults that help teams ship securely without friction. - Embed security into the software lifecycle through reviews, standards, and automation. - Drive areas such as secrets management, workload identity, and Kubernetes hardening through infrastructure as code. Detection, response and agentic security - Build automated detection and response, supported by specialist penetration testing. - Own incident playbooks, exercises, and investigations. - Threat-model our multi-tenant AI platform and define safe boundaries for coding agents. Team and enterprise readiness - Hire and develop senior security engineers across Application Security, Detection Engineering & Response, and Cloud & Platform Security. - **Give the team the direction and focus to solve underlying problem themes, not just individual findings.** - Support enterprise customers through security conversations, questionnaires, and evidence of our practices. **Who you are** - You have led and scaled a security engineering function through rapid product and team growth, ideally in an environment facing real threats. - You have an engineering background rather than a purely corporate infosec or compliance background. - You have strong architectural judgement and experience influencing technical direction at scale. - You understand application security, detection engineering, and cloud and platform security, and how they fit together. - You can operate as a peer to the engineering leadership, bringing security onto the agenda and making consequences and urgency clear. - You communicate clearly, translate risk into engineering terms, and influence without relying on mandates. **Nice to have** - Experience securing LLM-based or agentic products. - Experience building security at a high-growth SaaS company. - Depth in more than one security specialisation. - Experience with strict data confidentiality, data residency, or professional secrecy requirements. - Experience representing security externally with enterprise customers, through research, or speaking. If you are close but not a perfect match, apply anyway and tell us what you would own. **Legora is an Equal Opportunity Employer** At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.