Legora is seeking a Corporate Security Engineer to own the security of Legora’s environment — the identities, devices, SaaS applications, and AI tools that every employee depends on. This on-site role is based in New York, NY, United States (Union Square office) and sits within the IT and AI Enablement function, building security controls as software to keep Legora secure as we scale AI-enabled legal workflows.
Legora is seeking a Corporate Security Engineer to own the security of Legora’s environment — the identities, devices, SaaS applications, and AI tools that every employee depends on. This on-site role is based in New York, NY, United States (Union Square office) and sits within the IT and AI Enablement function, building security controls as software to keep Legora secure as we scale AI-enabled legal workflows.
What you’ll do - Own non-human identity: manage service accounts, agents, and workloads with short-lived, secretless credentials and scalable revocation. - Define and enforce the authorization model for agents: least-privilege, revocable, auditable access with delegated authority rather than standing access. - Govern how Legora uses AI: oversee employee use of LLMs and agents, ensure client data remains on sanctioned paths, and route the safe path to speed. - Strengthen employee identity: phishing-resistant MFA (passkeys / FIDO2), SSO, SCIM lifecycle, and least-privilege / just-in-time access across Google Workspace, Slack, Notion, and other SaaS, including protection against token theft, OAuth abuse, and session risks. - Improve SaaS security posture: configure and monitor security benchmarks, review risky OAuth grants, detect shadow SaaS and config drift. - Own endpoint and device trust: Apple-first fleet with MDM and EDR, with access gated by zero-trust and conditional access; partner with IT Systems and Workplace Technology. - Own data-protection controls (DLP) across endpoints, SaaS, browsers, and AI egress; run access reviews and surface insider-risk signals f
Track similar jobs
Get email alerts when new roles like this are posted.
Based on: Corporate Security Engineer
See how this role matches your resume
Sign in to get an AI match score and personalized feed.
What you’ll do - Own non-human identity: manage service accounts, agents, and workloads with short-lived, secretless credentials and scalable revocation. - Define and enforce the authorization model for agents: least-privilege, revocable, auditable access with delegated authority rather than standing access. - Govern how Legora uses AI: oversee employee use of LLMs and agents, ensure client data remains on sanctioned paths, and route the safe path to speed. - Strengthen employee identity: phishing-resistant MFA (passkeys / FIDO2), SSO, SCIM lifecycle, and least-privilege / just-in-time access across Google Workspace, Slack, Notion, and other SaaS, including protection against token theft, OAuth abuse, and session risks. - Improve SaaS security posture: configure and monitor security benchmarks, review risky OAuth grants, detect shadow SaaS and config drift. - Own endpoint and device trust: Apple-first fleet with MDM and EDR, with access gated by zero-trust and conditional access; partner with IT Systems and Workplace Technology. - Own data-protection controls (DLP) across endpoints, SaaS, browsers, and AI egress; run access reviews and surface insider-risk signals f
Track similar jobs
Get email alerts when new roles like this are posted.
Based on: Corporate Security Engineer
See how this role matches your resume
Sign in to get an AI match score and personalized feed.
Aftermarket Account Manager
HTS Engineering Ltd.
Full Stack Developer (Java + Angular)
Tecdata Engineering
Accounting and Financial Analyst
Linamar/McLaren Engineering
Network Automation Engineer
DLS Engineering
Quality Engineer
Answer Engineering / Re:Build Manufacturing
SOVT Technical Writer
Akima Systems Engineering
Aftermarket Account Manager
HTS Engineering Ltd.
Full Stack Developer (Java + Angular)
Tecdata Engineering
Accounting and Financial Analyst
Linamar/McLaren Engineering
Network Automation Engineer
DLS Engineering
Quality Engineer
Answer Engineering / Re:Build Manufacturing
SOVT Technical Writer
Akima Systems Engineering
