Corporate Security Engineer

Legora

On-sitePosted July 26, 2026

About the role

Legora is seeking a Corporate Security Engineer to own the security of Legora’s environment — the identities, devices, SaaS applications, and AI tools that every employee depends on. This on-site role is based in New York, NY, United States (Union Square office) and sits within the IT and AI Enablement function, building security controls as software to keep Legora secure as we scale AI-enabled legal workflows.

Corporate Security Engineer

Legora

On-sitePosted July 26, 2026

About the role

Legora is seeking a Corporate Security Engineer to own the security of Legora’s environment — the identities, devices, SaaS applications, and AI tools that every employee depends on. This on-site role is based in New York, NY, United States (Union Square office) and sits within the IT and AI Enablement function, building security controls as software to keep Legora secure as we scale AI-enabled legal workflows.

What you’ll do - Own non-human identity: manage service accounts, agents, and workloads with short-lived, secretless credentials and scalable revocation. - Define and enforce the authorization model for agents: least-privilege, revocable, auditable access with delegated authority rather than standing access. - Govern how Legora uses AI: oversee employee use of LLMs and agents, ensure client data remains on sanctioned paths, and route the safe path to speed. - Strengthen employee identity: phishing-resistant MFA (passkeys / FIDO2), SSO, SCIM lifecycle, and least-privilege / just-in-time access across Google Workspace, Slack, Notion, and other SaaS, including protection against token theft, OAuth abuse, and session risks. - Improve SaaS security posture: configure and monitor security benchmarks, review risky OAuth grants, detect shadow SaaS and config drift. - Own endpoint and device trust: Apple-first fleet with MDM and EDR, with access gated by zero-trust and conditional access; partner with IT Systems and Workplace Technology. - Own data-protection controls (DLP) across endpoints, SaaS, browsers, and AI egress; run access reviews and surface insider-risk signals f

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Corporate Security Engineer

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Engineering

Cybersecurity Product Fintech SaaS Remote-first

What you’ll do - Own non-human identity: manage service accounts, agents, and workloads with short-lived, secretless credentials and scalable revocation. - Define and enforce the authorization model for agents: least-privilege, revocable, auditable access with delegated authority rather than standing access. - Govern how Legora uses AI: oversee employee use of LLMs and agents, ensure client data remains on sanctioned paths, and route the safe path to speed. - Strengthen employee identity: phishing-resistant MFA (passkeys / FIDO2), SSO, SCIM lifecycle, and least-privilege / just-in-time access across Google Workspace, Slack, Notion, and other SaaS, including protection against token theft, OAuth abuse, and session risks. - Improve SaaS security posture: configure and monitor security benchmarks, review risky OAuth grants, detect shadow SaaS and config drift. - Own endpoint and device trust: Apple-first fleet with MDM and EDR, with access gated by zero-trust and conditional access; partner with IT Systems and Workplace Technology. - Own data-protection controls (DLP) across endpoints, SaaS, browsers, and AI egress; run access reviews and surface insider-risk signals f