← Back to jobs

Security Engineering Director

legora

OnSite Stockholm HQ
Engineering Information Security IT Governance

Job Score

100 pts
On-site model (+70) Engineering (+10) Information Security (+10) IT Governance (+10)

About Us

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.

Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.

1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.

We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.

Joining Legora means three things.

  • We lean in: ownership over titles, outcomes over intentions.

  • We fight for excellence: high standards, direct, ego-free feedback.

  • We grow together: as a team and with our customers.

Mission before ego. Everyone contributes. No one coasts.

If you’re driven by impact, pace, and raising the bar. This is the place.

The role

At Legora, security is the foundation of the trust our customers place in us. The world's leading law firms and largest corporations use our platform for their most sensitive matters. The risk of breach is very high, and we treat it that way.


We are building an engineering-led security function: secure defaults, paved roads, automation, and measurable risk reduction not advisory gates or ticket queues.

We need a Director of Security Engineering to set the direction for security across our product, platform, and cloud estate; build and lead the team; and tackle systemic problems rather than continually react to individual ones. You will work closely with engineering leadership to anticipate challenges, influence architecture and priorities, and make blockers and consequences clear.

This role can be based in Stockholm or New York. It is a 5-day in-office role we believe building together in person drives better outcomes.

What you will be doing

Security strategy and architecture

  • Define the security standard across Legora's product, platform, and customer commitments.

  • Set the roadmap and investment priorities, looking ahead and identifying emerging risks and blockers early.

  • Partner with the CTO and engineering leadership on architecture and technical direction.

Engineering enablement

  • Build tools, paved paths, and secure defaults that help teams ship securely without friction.

  • Embed security into the software lifecycle through reviews, standards, and automation.

  • Drive areas such as secrets management, workload identity, and Kubernetes hardening through infrastructure as code.

Detection, response and agentic security

  • Build automated detection and response, supported by specialist penetration testing.

  • Own incident playbooks, exercises, and investigations.

  • Threat-model our multi-tenant AI platform and define safe boundaries for coding agents.

Team and enterprise readiness

  • Hire and develop senior security engineers across Application Security, Detection Engineering & Response, and Cloud & Platform Security.

  • Give the team the direction and focus to solve underlying problem themes, not just individual findings.

  • Support enterprise customers through security conversations, questionnaires, and evidence of our practices.

Who you are

  • You have led and scaled a security engineering function through rapid product and team growth, ideally in an environment facing real threats.

  • You have an engineering background rather than a purely corporate infosec or compliance background.

  • You have strong architectural judgement and experience influencing technical direction at scale.

  • You understand application security, detection engineering, and cloud and platform security, and how they fit together.

  • You can operate as a peer to the engineering leadership, bringing security onto the agenda and making consequences and urgency clear.

  • You communicate clearly, translate risk into engineering terms, and influence without relying on mandates.

Nice to have

  • Experience securing LLM-based or agentic products.

  • Experience building security at a high-growth SaaS company.

  • Depth in more than one security specialisation.

  • Experience with strict data confidentiality, data residency, or professional secrecy requirements.

  • Experience representing security externally with enterprise customers, through research, or speaking.

If you are close but not a perfect match, apply anyway and tell us what you would own.

Legora is an Equal Opportunity Employer

At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Engineering

Software Engineering goes beyond traditional development, focusing on scalability, performance, and system architecture. Software engineers are responsible for designing infrastructures that support millions of simultaneous users.

Skills include microservices architecture, DevOps, cloud computing, application security, and performance optimization. Knowledge of containerization (Docker, Kubernetes) and CI/CD is increasingly required.

Senior software engineers are rare and highly compensated professionals, with opportunities at major global tech companies.

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

About IT Governance

IT Governance is the area responsible for ensuring that information technology resources are used strategically, efficiently, and in compliance with standards and regulations. IT governance professionals ensure that technology supports business objectives in a secure and reliable manner.

Key skills include IT service management (ITIL), IT audit and compliance, risk management, business continuity, disaster recovery, metrics and indicators (SLAs, KPIs), and strategic alignment between IT and business. Frameworks like COBIT, ITIL, ISO 27001, and compliance standards are essential.

IT Governance professionals in technology companies are highly valued, especially those who master ITSM, IT audit, and risk management. The field offers opportunities from governance analyst to CIO/CTO, with a focus on efficiency, compliance, security, and business value.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Audiovisual

The Audiovisual area is responsible for producing, editing, and creating video and audio content for various platforms. With the exponential growth of digital content, audiovisual professionals are fundamental for brands that want to communicate visually and impactfully.

Key skills include video production and editing (Premiere Pro, DaVinci Resolve, Final Cut), motion graphics (After Effects), animation (Blender, Cinema 4D), sound design, podcast production, live streaming (OBS Studio), and photography. Knowledge of visual storytelling, rhythm, and art direction is a differentiator.

Audiovisual professionals in technology companies are highly valued, especially those who master motion graphics, social media videos, and content for digital platforms. The field offers opportunities from videomaker to head of audiovisual, with a focus on creativity, technical quality, and storytelling.

About Product Management

Product Management is one of the most strategically relevant areas in technology organizations. The Product Manager is responsible for defining product vision, prioritizing features, and coordinating multidisciplinary teams to deliver value to users.

Essential skills include strategic thinking, data analysis, communication, leadership, and technical knowledge. Tools like Jira, Confluence, Miro, and analytics platforms are fundamental in daily work.

Salaries for PMs range from entry-level to senior positions at major tech companies, with growing opportunities for international remote work.

About Content

The Content and Social Media area is essential for building digital presence and audience engagement. Professionals create content strategies, manage social networks, and develop impactful brand narratives.

Key skills include copywriting, storytelling, community management, metrics analysis, audiovisual production, and knowledge of each platform algorithms.

With the growth of influencer marketing and social commerce, this area continues to generate new career opportunities.

About Customer Success

Customer Success is the area responsible for ensuring clients achieve their goals when using the product or service. It is a strategic function for retention, expansion, and customer satisfaction.

Key skills include account management, churn analysis, NPS, onboarding, upsell, and cross-sell. Knowledge of CS tools like Gainsight, Totango, and ChurnZero is a differentiator.

CS is becoming increasingly strategic in SaaS companies, with professionals directly contributing to recurring revenue growth (MRR/ARR).

About Project Management

Project Management is essential to ensure strategic initiatives are delivered on time, within scope, and with quality. PM professionals coordinate teams, manage risks, and communicate with stakeholders.

Key methodologies include PMBOK, PRINCE2, Scrum, and Kanban. Tools like Jira, Asana, Monday, and MS Project are widely used in daily work.

Certifications like PMP and PgMP are important differentiators in the market, with growing demand in technology and consulting companies.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

The Evolution of Support and Customer Success

The Evolution of Support and Customer Success: Opportunities, Tools, and the New Professional Profile

Discover how customer service evolved from a cost center into the ultimate growth and retention engine for the world's leading tech and SaaS companies.

The Current Landscape: From Cost Center to Revenue Engine

Historically, customer support was viewed by companies merely as a reactive department, focused on troubleshooting technical issues and closing tickets. However, with the consolidation of the SaaS (Software as a Service) business model and the subscription economy, the game has drastically changed.

Today, Customer Experience (CX) and Customer Success (CS) are the pillars of a company's financial sustainability. The logic is simple: in a highly competitive market, the Customer Acquisition Cost (CAC) is incredibly high. Losing a customer (Churn) means bleeding money. The modern support professional is, in reality, a strategist focused on retention, account expansion (Upsell/Cross-sell), and ensuring that the client achieves their desired outcomes using the product.

"Acquiring a new customer is anywhere from five to 25 times more expensive than retaining an existing one." — Harvard Business Review

Customer Support vs. Customer Success: Understanding the Difference

Although both areas walk hand-in-hand, their roles and success metrics in the job market are distinct. Understanding this difference is crucial for anyone looking to enter or advance in this career:

  • Customer Support: Predominantly reactive and transactional. The focus is on the speed and efficiency of issue resolution. Common metrics include First Response Time (FRT), Mean Time to Resolution (MTTR), and Customer Satisfaction Score (CSAT).
  • Customer Success: A proactive and long-term function. The goal is to ensure the customer extracts maximum value from the product. CS professionals analyze the Health Score, conduct Quarterly Business Reviews (QBRs), and directly target Net Retention Revenue (NRR) while combating Churn.

Market Opportunities and Global Remote Work

The global market for B2B Support and CS professionals is hotter than ever. Startups and major international corporations are massively hiring talent worldwide to provide 24/7 coverage across different time zones.

Opportunities range from entry-level roles, such as Customer Support Representative (CSR), to high-level executive positions like Key Account Manager, Implementation Specialist, Customer Success Manager (CSM), and Head of CX. For professionals with native or fluent English, "Global Remote" and "US Remote" positions offer highly competitive six-figure compensation packages, equity, and aggressive benefits.

Tech Stack: The Tools You Must Master

To pass through the rigorous ATS (Applicant Tracking Systems, like Greenhouse or Ashby) used by top-tier tech companies, your resume must showcase familiarity with the platforms that orchestrate the customer journey. The most demanded tools include:

  • Zendesk and Intercom: The global leaders in ticket management, asynchronous chat, and omnichannel support automation.
  • Salesforce and HubSpot: Essential CRMs (Customer Relationship Management) to maintain data history and alignment between Sales and Support teams.
  • Jira and Confluence: Atlassian tools crucial for escalating frontline bugs directly to the Engineering and Product teams.
  • Gainsight and Totango: Enterprise-grade platforms specifically built for Customer Success, used to monitor portfolio health predictively.

The Profile of the Modern CX Professional

The stereotype of the agent reading from a rigid script is a thing of the past. Tech recruiters are looking for a profile that blends emotional intelligence with analytical (data-driven) capabilities. The most valued competencies today are:

  1. Empathy and Resilience: The ability to de-escalate frustrated clients and turn crises into loyalty-building opportunities.
  2. Flawless Asynchronous Communication: Especially in remote work environments, clarity in writing emails, documentation, and chat threads is non-negotiable.
  3. Data Literacy: Knowing how to read dashboards, spot where users are getting stuck in the product, and suggest improvements based on hard data.
  4. Product Vision: Modern support acts as the primary feedback loop between the end-user and the Engineering and UX Design teams.