Staff Infrastructure Security Engineer

Description

The company applies agentic AI, an enterprise-grade platform and deep legal and professional services expertise to change how critical knowledge work is done.

The company has strong product-market fit and backing from well-known investors, is scaling quickly and is defining a new product category.

The team moves fast, takes ownership and works closely with customers. Its values are Decisiveness, Simplicity and Job's Not Finished, meaning it acts on sound judgment without perfect information, favors simple solutions that scale and does not settle for the current state.

Customers including large companies and their law firms use the company's AI to deliver client services at scale and with more efficiency.

Security is central to the company because customers trust it with highly sensitive data. The security program is growing quickly, so this role helps build it from an early stage, with an engineering-first approach that keeps customers in focus.

In this role you will set the technical direction for secure-by-default infrastructure security on a multi-tenant SaaS platform, defining the patterns and standards other engineers build on. The work covers least privilege, component isolation, attack surface management and layered tenant isolation. You will also build frameworks that let research and engineering teams move fast and independently without weakening security.

Responsibilities

• Bake secure design principles into the cloud architecture.
• Create reusable security patterns, standards and guardrails so product and platform teams build securely by default.
• Build isolation mechanisms such as sandboxing with the product engineering team.
• Review security-critical configuration changes and serve as code owner for the security-critical parts of the cloud configuration, which is entirely infrastructure as code.
• Work with engineering and product teams to manage cloud risks and vulnerabilities, turn security requirements into concrete engineering work, and define infrastructure security architecture and multi-quarter roadmaps.
• Mentor other security engineers and raise the team's overall technical bar.

Requirements

• You have 8+ years of experience in security engineering, software engineering or both.
• You have written high-quality software, built production-grade infrastructure and raised the security bar across engineering teams.
• You have a solid grasp of networking, operating systems and cryptographic protocols.
• You know Kubernetes well, including common misconfigurations and privilege escalation paths.
• You have shown you can find weaknesses, such as privilege escalation, in real cloud environments.
• You have applied security best practices in AWS, Azure or Google Cloud.
• You have led cross-functional security work and shaped engineering decisions across teams.
• You have set security standards and best practices across an entire organization.
• No experience with generative AI or legal work is required.
• Bonus: familiarity with large-scale infrastructure as code deployments.
• Bonus: familiarity with Kubernetes admission controllers and policy enforcement.
• Bonus: exposure to multi-cloud environments.

Conditions

Base pay range: $231,000 - $340,000 USD.

Job code: LI-NP1.

The company is an equal opportunity employer and does not discriminate on any protected basis.

Applicants who need reasonable accommodation because of a disability can ask for one at the company's site.