Security Engineering Director
legora
Job Score
100 ptsAbout Us
Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.
We lean in: ownership over titles, outcomes over intentions.
We fight for excellence: high standards, direct, ego-free feedback.
We grow together: as a team and with our customers.
Mission before ego. Everyone contributes. No one coasts.
If you’re driven by impact, pace, and raising the bar. This is the place.
The role
At Legora, security is the foundation of the trust our customers place in us. The world's leading law firms and largest corporations use our platform for their most sensitive matters. The risk of breach is very high, and we treat it that way.
We are building an engineering-led security function: secure defaults, paved roads, automation, and measurable risk reduction not advisory gates or ticket queues.
We need a Director of Security Engineering to set the direction for security across our product, platform, and cloud estate; build and lead the team; and tackle systemic problems rather than continually react to individual ones. You will work closely with engineering leadership to anticipate challenges, influence architecture and priorities, and make blockers and consequences clear.
This role can be based in Stockholm or New York. It is a 5-day in-office role we believe building together in person drives better outcomes.
What you will be doing
Security strategy and architecture
Define the security standard across Legora's product, platform, and customer commitments.
Set the roadmap and investment priorities, looking ahead and identifying emerging risks and blockers early.
Partner with the CTO and engineering leadership on architecture and technical direction.
Engineering enablement
Build tools, paved paths, and secure defaults that help teams ship securely without friction.
Embed security into the software lifecycle through reviews, standards, and automation.
Drive areas such as secrets management, workload identity, and Kubernetes hardening through infrastructure as code.
Detection, response and agentic security
Build automated detection and response, supported by specialist penetration testing.
Own incident playbooks, exercises, and investigations.
Threat-model our multi-tenant AI platform and define safe boundaries for coding agents.
Team and enterprise readiness
Hire and develop senior security engineers across Application Security, Detection Engineering & Response, and Cloud & Platform Security.
Give the team the direction and focus to solve underlying problem themes, not just individual findings.
Support enterprise customers through security conversations, questionnaires, and evidence of our practices.
Who you are
You have led and scaled a security engineering function through rapid product and team growth, ideally in an environment facing real threats.
You have an engineering background rather than a purely corporate infosec or compliance background.
You have strong architectural judgement and experience influencing technical direction at scale.
You understand application security, detection engineering, and cloud and platform security, and how they fit together.
You can operate as a peer to the engineering leadership, bringing security onto the agenda and making consequences and urgency clear.
You communicate clearly, translate risk into engineering terms, and influence without relying on mandates.
Nice to have
Experience securing LLM-based or agentic products.
Experience building security at a high-growth SaaS company.
Depth in more than one security specialisation.
Experience with strict data confidentiality, data residency, or professional secrecy requirements.
Experience representing security externally with enterprise customers, through research, or speaking.
If you are close but not a perfect match, apply anyway and tell us what you would own.
Legora is an Equal Opportunity Employer
At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.
About Engineering
Software Engineering goes beyond traditional development, focusing on scalability, performance, and system architecture. Software engineers are responsible for designing infrastructures that support millions of simultaneous users.
Skills include microservices architecture, DevOps, cloud computing, application security, and performance optimization. Knowledge of containerization (Docker, Kubernetes) and CI/CD is increasingly required.
Senior software engineers are rare and highly compensated professionals, with opportunities at major global tech companies.
About Information Security
The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.
Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.
Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.
About IT Governance
IT Governance is the area responsible for ensuring that information technology resources are used strategically, efficiently, and in compliance with standards and regulations. IT governance professionals ensure that technology supports business objectives in a secure and reliable manner.
Key skills include IT service management (ITIL), IT audit and compliance, risk management, business continuity, disaster recovery, metrics and indicators (SLAs, KPIs), and strategic alignment between IT and business. Frameworks like COBIT, ITIL, ISO 27001, and compliance standards are essential.
IT Governance professionals in technology companies are highly valued, especially those who master ITSM, IT audit, and risk management. The field offers opportunities from governance analyst to CIO/CTO, with a focus on efficiency, compliance, security, and business value.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Customer Success
Customer Success is the area responsible for ensuring clients achieve their goals when using the product or service. It is a strategic function for retention, expansion, and customer satisfaction.
Key skills include account management, churn analysis, NPS, onboarding, upsell, and cross-sell. Knowledge of CS tools like Gainsight, Totango, and ChurnZero is a differentiator.
CS is becoming increasingly strategic in SaaS companies, with professionals directly contributing to recurring revenue growth (MRR/ARR).
About Scrum Master
The Scrum Master is the professional responsible for facilitating the adoption of Scrum and agile practices within development teams. They act as servant leaders, removing impediments, promoting continuous improvement, and ensuring Scrum events and ceremonies happen in the best possible way.
Key skills include event facilitation (sprint planning, daily, review, retrospective), backlog management, team coaching, conflict resolution, and agile metrics (velocity, burndown, cycle time). Knowledge of Jira, Trello, Azure DevOps, and frameworks like Kanban, XP, and SAFe is a differentiator.
Scrum Masters in technology companies are highly valued, especially those who can promote team autonomy, create psychologically safe environments, and lead agile transformations at scale. The field offers opportunities from junior scrum master to agile coach, head of agile, and director of agile transformation.
About Sales
The Sales area is responsible for generating revenue and expanding the customer base. B2B and B2C sales professionals are fundamental for sustainable growth of any organization.
Key skills include prospecting, negotiation, CRM (Salesforce, HubSpot), sales enablement, and value consulting. The consultative and data-driven approach is increasingly valued.
Consultative sellers and senior Sales Managers have very high earning potential, with OTE (On-Target Earnings) that can exceed monthly salaries in technology companies.
About UX Design
The User Experience (UX) Design area focuses on optimizing the overall user experience when interacting with a product or service. UX professionals conduct user research (UX Research), map journeys, create wireframes, perform usability tests, and define navigation flows to ensure the product is intuitive, useful, and meets users' real needs.
About Communications
The Communications area is strategic for building and maintaining a company's institutional image. It encompasses corporate, internal, and external communication, public relations, press office, and reputation management. Communications professionals are responsible for delivering consistent messages that strengthen the employer brand and market positioning.
Key skills include strategic writing, communication planning, crisis management, media relations, corporate content production, event organization, and digital communication. Knowledge of communication CRMs, press release distribution platforms, and media monitoring tools (Meltwater, Cision) is a differentiator.
Corporate communicators in technology companies are highly valued, especially those who master change communication, employee engagement, and digital communication. The field offers opportunities in startups, scale-ups, and large corporations, with a focus on storytelling, organizational culture, and innovation communication.
Comments 0