← Back to jobs

Security Engineering Director

legora

OnSite Stockholm HQ
Engineering Information Security IT Governance

Job Score

100 pts
On-site model (+70) Engineering (+10) Information Security (+10) IT Governance (+10)

About Us

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.

Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.

1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.

We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.

Joining Legora means three things.

  • We lean in: ownership over titles, outcomes over intentions.

  • We fight for excellence: high standards, direct, ego-free feedback.

  • We grow together: as a team and with our customers.

Mission before ego. Everyone contributes. No one coasts.

If you’re driven by impact, pace, and raising the bar. This is the place.

The role

At Legora, security is the foundation of the trust our customers place in us. The world's leading law firms and largest corporations use our platform for their most sensitive matters. The risk of breach is very high, and we treat it that way.


We are building an engineering-led security function: secure defaults, paved roads, automation, and measurable risk reduction not advisory gates or ticket queues.

We need a Director of Security Engineering to set the direction for security across our product, platform, and cloud estate; build and lead the team; and tackle systemic problems rather than continually react to individual ones. You will work closely with engineering leadership to anticipate challenges, influence architecture and priorities, and make blockers and consequences clear.

This role can be based in Stockholm or New York. It is a 5-day in-office role we believe building together in person drives better outcomes.

What you will be doing

Security strategy and architecture

  • Define the security standard across Legora's product, platform, and customer commitments.

  • Set the roadmap and investment priorities, looking ahead and identifying emerging risks and blockers early.

  • Partner with the CTO and engineering leadership on architecture and technical direction.

Engineering enablement

  • Build tools, paved paths, and secure defaults that help teams ship securely without friction.

  • Embed security into the software lifecycle through reviews, standards, and automation.

  • Drive areas such as secrets management, workload identity, and Kubernetes hardening through infrastructure as code.

Detection, response and agentic security

  • Build automated detection and response, supported by specialist penetration testing.

  • Own incident playbooks, exercises, and investigations.

  • Threat-model our multi-tenant AI platform and define safe boundaries for coding agents.

Team and enterprise readiness

  • Hire and develop senior security engineers across Application Security, Detection Engineering & Response, and Cloud & Platform Security.

  • Give the team the direction and focus to solve underlying problem themes, not just individual findings.

  • Support enterprise customers through security conversations, questionnaires, and evidence of our practices.

Who you are

  • You have led and scaled a security engineering function through rapid product and team growth, ideally in an environment facing real threats.

  • You have an engineering background rather than a purely corporate infosec or compliance background.

  • You have strong architectural judgement and experience influencing technical direction at scale.

  • You understand application security, detection engineering, and cloud and platform security, and how they fit together.

  • You can operate as a peer to the engineering leadership, bringing security onto the agenda and making consequences and urgency clear.

  • You communicate clearly, translate risk into engineering terms, and influence without relying on mandates.

Nice to have

  • Experience securing LLM-based or agentic products.

  • Experience building security at a high-growth SaaS company.

  • Depth in more than one security specialisation.

  • Experience with strict data confidentiality, data residency, or professional secrecy requirements.

  • Experience representing security externally with enterprise customers, through research, or speaking.

If you are close but not a perfect match, apply anyway and tell us what you would own.

Legora is an Equal Opportunity Employer

At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Engineering

Software Engineering goes beyond traditional development, focusing on scalability, performance, and system architecture. Software engineers are responsible for designing infrastructures that support millions of simultaneous users.

Skills include microservices architecture, DevOps, cloud computing, application security, and performance optimization. Knowledge of containerization (Docker, Kubernetes) and CI/CD is increasingly required.

Senior software engineers are rare and highly compensated professionals, with opportunities at major global tech companies.

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

About IT Governance

IT Governance is the area responsible for ensuring that information technology resources are used strategically, efficiently, and in compliance with standards and regulations. IT governance professionals ensure that technology supports business objectives in a secure and reliable manner.

Key skills include IT service management (ITIL), IT audit and compliance, risk management, business continuity, disaster recovery, metrics and indicators (SLAs, KPIs), and strategic alignment between IT and business. Frameworks like COBIT, ITIL, ISO 27001, and compliance standards are essential.

IT Governance professionals in technology companies are highly valued, especially those who master ITSM, IT audit, and risk management. The field offers opportunities from governance analyst to CIO/CTO, with a focus on efficiency, compliance, security, and business value.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Marketing

The Marketing area is strategic for the growth and positioning of any company. It encompasses traditional marketing, brand management, market research, trade marketing, product marketing, and market intelligence. Marketing professionals are responsible for planning and executing strategies that connect brands to their target audience.

Key skills include brand management, market research, competitive analysis, product marketing, trade marketing, pricing, relationship marketing, and channel development. Knowledge of research tools (Nielsen, Kantar, Ipsos), BI, and advanced spreadsheets is a differentiator.

Marketing professionals in technology companies are highly valued, especially those who master product marketing, go-to-market strategy, and data-driven marketing. The field offers opportunities from analyst to CMO, with a focus on growth, brand positioning, and return on investment.

About Public Relations

The Public Relations (PR) area focuses on managing the reputation, image, and communication of an organization with its various stakeholders (such as clients, investors, employees, media, and the community). PR professionals develop corporate communication strategies, manage media relations (press relations), organize institutional events, and work in image crisis prevention and management.

About SEO Analyst

The SEO Analyst is the professional responsible for optimizing websites for search engines, increasing organic visibility and qualified traffic. With the growing importance of digital marketing, SEO professionals are fundamental to any online presence strategy.

Key skills include on-page and off-page SEO, technical SEO, keyword research, SEO audits, link building, optimized content creation, and metrics analysis. Tools like Google Search Console, Google Analytics, Ahrefs, Semrush, Moz, and Screaming Frog are essential for daily work.

SEO analysts in technology companies are highly valued, especially those who master technical SEO, Core Web Vitals, and data-driven content strategies. The field offers opportunities from junior analyst to head of SEO, with a focus on organic growth, domain authority, and return on investment.

About Account Manager

The Account Manager is the professional responsible for managing and expanding the relationship with clients after the sale. They act as a strategic partner, ensuring satisfaction, retention, and account growth, connecting client needs with company solutions.

Key skills include relationship management, negotiation, upsell and cross-sell, contract renewal, account planning, business reviews, metrics analysis (NPS, churn, LTV), and CRM knowledge (Salesforce, HubSpot). Communication, empathy, and business vision are fundamental differentiators.

Account Managers in technology and SaaS companies are highly valued, especially those who can increase recurring revenue (MRR/ARR) through account expansion and churn prevention. The field offers opportunities from account executive to director of accounts, with a focus on strategic relationship, revenue growth, and customer success.

About Customer Service

The Customer Service / Client Relations area is essential for ensuring customer satisfaction, retention, and a good relationship. Professionals in this field are the primary interface for communication, handling inquiries, requests, feedback, and ensuring a high-quality day-to-day experience. Skills in communication, problem-solving, empathy, and patience are indispensable.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

How to Build an Unbeatable Resume in 2026

At Mondywork, our engine analyzes hundreds of the best remote jobs daily. If there's one thing we've learned from observing the backend of elite recruiting platforms like Greenhouse, Ashby, and Workday, it's this: a good resume isn't the prettiest one; it's the most efficient one.

Many highly qualified professionals miss out on golden opportunities (and six-figure remote roles) simply because their resumes fail to communicate their value within seconds or get trapped in automated corporate filters.

To change that game, we've gathered the best market practices, rooted in data and the brightest minds in global recruiting.

1. The 7.4-Second Rule (The Skimming Test)

The biggest mistake candidates make is assuming the recruiter will read their resume like a book. The reality is much colder.

A famous study conducted by the career and recruiting firm Ladders, using eye-tracking technology, revealed that recruiters spend an average of only 7.4 seconds scanning a resume before deciding whether the candidate moves forward to the next round.

How to optimize your resume for the 7.4 seconds:

  • Clear Visual Hierarchy: Recruiters instinctively look for your Job Title, Current Company, and Dates of Employment. Make this information effortless to find.
  • Bullet Points Only: Never use large blocks of text. The human brain scans lists much more easily.
  • Focus on the Top Third: The top third of your resume (your professional summary and your most recent experience) is your "premium real estate." Your biggest selling points must live there.

2. Google's XYZ Formula for Experience

Most people describe what they did at work (their responsibilities). Recruiters want to know what you achieved (your results).

Laszlo Bock, former Senior Vice President of People Operations at Google, popularized the ultimate methodology for writing experience bullet points: The XYZ Formula.

The structure is simple and powerful:

"Accomplished [X] as measured by [Y], by doing [Z]."

  • Bad (Task-focused): "Wrote code for the payment platform."
  • Good (Result-focused): "Improved the speed of the payment platform."
  • The Google Standard (XYZ Formula): "Increased payment processing speed by 15% (X), reducing page load time by 1.2 seconds (Y), by refactoring the legacy API to Node.js (Z)."

Pro Tip: Whether you're in Digital Marketing, Design, or Tech, use hard metrics. Talk about conversion percentages, cost reductions, active user growth, or hours saved.

3. Beat the Bots: ATS Optimization

Over 99% of Fortune 500 companies and a vast majority of tech startups use ATS (Applicant Tracking Systems). These are software programs that read and filter resumes before a human ever lays eyes on them.

Austin Belcak, founder of Cultivated Culture and employability expert, analyzed over 125,000 resumes and found that complex formatting is the number one enemy of getting hired.

How to pass the ATS filter:

  • Ditch the Canvas (mostly): Resumes with dual columns, skill progress bars (e.g., "70% in JavaScript"), and graphic icons frequently confuse bots, which extract text in a jumbled mess.
  • Use a Linear Format: A simple Word or Google Docs document, saved as a PDF, with single-column formatting (reading top to bottom) is the safest template in the world.
  • Keyword Mirroring: ATS software runs on keywords. Read the job description on Mondywork and ensure the required hard skills (e.g., React, SEO, Figma, Agile) are explicitly written on your resume.

4. The Professional Summary (Your Elevator Pitch)

The traditional "Objective" statement ("Looking for an opportunity to grow within the company") is dead. Today, what works is the Executive Summary.

Use 3 or 4 lines at the very top of your resume to define who you are, your core specialty, and your biggest career win.

Example: "Mid-level Front-end Developer with 4 years of experience in e-commerce. Specialist in React and performance optimization (Web Vitals), with a proven track record of increasing mobile checkout conversion rates by 20%."

🚀 Ready to test your new Resume?

Now that your resume is optimized for the competitive US market and entirely focused on results, it's time to put it in play.

At Mondywork, our engine curates the best remote Tech, Design, and Digital Marketing opportunities from top companies every single day.

👉 [Insert Home page link here] and sign up for our Job Alerts. Be the first to apply to high-paying remote roles before anyone else!