Security Detection and Response Engineer (AI)

Location: Must be based in New York City (On-site)

Salary: $187,000 – $328,888 + Equity

Company

Legora is an AI-native workspace platform transforming legal workflows for top-tier global law firms and corporate legal teams.

What you will do

• Own detection and response across endpoints, identity, cloud workloads, SaaS, and AI systems.
• Build detections as production software using CI/CD pipelines, ensuring version control and peer review.
• Develop threat models, telemetry, and response playbooks specifically for AI agents and their tool use.
• Build and supervise AI agents for triage, enrichment, and investigation.
• Map security coverage to MITRE ATT&CK and validate through adversary emulation and threat hunting.
• Act as incident commander during security events and conduct post-incident reviews to drive system improvements.

Requirements

• 5+ years of experience in detection engineering, incident response, or security operations.
• Strong software engineering skills in Python and SQL.
• Experience using LLMs and agents in security workflows.
• Proficiency across endpoint, identity, cloud, and SaaS telemetry.
• Ability to communicate clearly during incidents and translate technical evidence into sound decisions.
• Must be authorized to work in the United States.

Nice to have

• Experience with modern SIEM or security data lakes (SPL, KQL, YARA-L, Sigma).
• Background in securing AI systems, including prompt injection and exfiltration risk mitigation.
• Experience with response automation, digital forensics, or malware analysis.

Culture & Benefits

• Comprehensive medical, dental, and vision plans (Aetna/Kaiser Permanente).
• 401(k) with generous company match.
• Unlimited PTO and generous parental leave.
• Pre-tax commuter benefits and daily company-provided lunch at the Union Square office.
• Free access to Maven Clinic and One Medical membership.