Staff Infrastructure Security Engineer

Description

The company applies agentic AI, an enterprise-grade platform and deep domain expertise to legal and professional services work, and is scaling fast with strong product-market fit and investor backing.

Customers include large companies and their law firms, who use the AI to deliver client work faster and handle more complex problems.

Security is central here: customers entrust the company with highly sensitive data, and the platform must stay secure, trustworthy and compliant.

The team works with an engineering-first approach, keeping customers at the center of its decisions. The security program is young and growing, so the role involves shaping its direction from the start.

The team values ownership, quick decisions made on sound judgment, simple solutions and a constant drive to improve.

Responsibilities

• Set the technical direction for secure-by-default infrastructure security on the multi-tenant SaaS platform, defining the patterns that the wider engineering organization follows.
• Design and build processes and technology for least privilege, component isolation, attack surface management and layered tenant isolation.
• Create reusable security patterns, standards and guardrails so product and platform teams can ship securely by default.
• Build isolation mechanisms such as sandboxing, working alongside the product engineering team.
• Build secure design principles into the cloud architecture.
• Review changes to security-critical configuration and serve as code owner for those parts of the cloud configuration, which is all managed as infrastructure as code.
• With Engineering and Product, identify and reduce risks and vulnerabilities in the cloud environment, turn security requirements into concrete engineering work, and define the infrastructure security architecture and multi-quarter roadmap.
• Coach other security engineers on the team and help raise the overall technical standard.

Requirements

• 8+ years of experience in security engineering, software engineering or both.
• A record of writing high-quality software, building production-grade infrastructure and lifting security standards across engineering teams.
• Solid grounding in networking, operating systems and cryptographic protocols.
• Deep knowledge of Kubernetes, common misconfigurations and privilege escalation paths.
• A proven ability to find real weaknesses, such as privilege escalation, in live cloud environments.
• Hands-on experience applying security best practices in AWS, Azure or Google Cloud.
• A history of leading cross-functional security work and shaping engineering decisions across teams.
• Experience setting security standards and best practices across an entire organization.
• No experience with generative AI or legal work is required.
• Optional: familiarity with large-scale infrastructure as code deployments.
• Optional: familiarity with Kubernetes admission controllers and policy enforcement.
• Optional: exposure to multi-cloud environments.

Conditions

Base pay range: $231,000 - $340,000 USD.

The company is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity or expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other protected basis.

Reasonable accommodations are available for applicants with disabilities; requests can be sent to the company's site.