Security Engineer

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal

teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.

Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing

thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters:

judgment, strategy, and outcomes.

2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and

Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through

acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler.

We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and

campaigns featuring Jude Law.

At Legora, security is the foundation of the trust our customers place in us. The world’s leading law firms, as well as some of

the biggest corporations use our platform for their most sensitive matters, and we need security to be built into how we design,

ship, operate, and scale.

We are looking for exceptional Security Engineers who can build leverage across a large surface area: a multi-tenant AI platform,

a multi-cloud estate with Azure as our primary cloud, and an engineering organisation that ships fast. This is a hands-on

engineering role. You will own security work end to end, build tooling and guardrails, embed with engineering teams, and make the

secure path the default path.

We hire T-shaped security engineers. You should bring real depth in one of Application Security, Detection Engineering & Response,

or Cloud & Platform Security, while staying credible across the others. Tell us in your application which area is your

specialisation.

This role can be based in Stockholm or New York. It is a 5-day in-office role, we believe building together in person drives

better outcomes.

• Build and ship software: guardrails, detections, libraries, automation, and workflows that live in git, are reviewed, tested,

and deployed through CI/CD.

• Secure a multi-tenant AI platform, including identity, authorisation, tenant isolation, data handling, and model-facing attack

surfaces.

• Application Security: Threat model features and architectures, review high-risk changes across authentication, authorisation,

tenant isolation, and data handling, and secure AI and agentic product features against prompt injection, tool-use abuse, data

exfiltration, and related attack paths.

• Detection Engineering & Response: Own detection-as-code, security data pipelines, abuse and account-compromise detection, and

incident response across corporate and product surfaces. Build the agents that run first-pass triage and investigation, plus

the guardrails and evals that make their output trustworthy. No tiered queue.

• Cloud & Platform Security: Harden identity, access, cloud control planes, CI/CD, supply chain, infrastructure-as-code, AKS

baselines, tenant isolation primitives, and least-privilege access for engineers, workloads, and AI agents.

• Several years of engineering experience in your security specialisation, with real depth in vulnerabilities you have found,

incidents you have run, systems you have hardened, or tooling you have built.

• You are comfortable operating across application security, detection and response, and cloud/platform security, even if one of

those areas is your main depth.

• You are excited by a small team with a large surface area, where the right answer is usually to build leverage rather than

create queues.

At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity

employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people

of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression,

sexual orientation, age, disability, veteran status, or any other characteristic protected by law.