Security Engineer (AI)

Location: Stockholm or New York; 5 days per week in the office

Company

Legora develops an AI-native workspace that helps legal professionals analyse documents and manage end-to-end legal workflows.

What you will do

• Own security work end to end, including architecture, tooling, roadmaps, and outcomes.
• Embed with engineering teams to make secure design, development, and operations the default.
• Build and ship guardrails, detections, libraries, automation, and workflows through CI/CD.
• Lead design reviews, threat modelling, security enablement, and remediation of systemic vulnerabilities.
• Secure the multi-tenant AI platform, including identity, authorisation, tenant isolation, data handling, and model-facing attack surfaces.
• Respond to incidents and produce post-mortems that drive technical and organisational improvements.

Requirements

• Several years of engineering experience with deep expertise in Application Security, Detection Engineering & Response, or Cloud & Platform Security.
• Production-quality programming skills, primarily in TypeScript/Node.js and Python.
• Working knowledge across application security, detection and response, and cloud/platform security.
• Understanding of identity, authorisation, multi-tenancy, and common security-boundary failures.
• Clear communication skills and the ability to translate security risk into engineering decisions.
• Ability to operate calmly and systematically during security incidents.

Nice to have

• Experience securing LLM-based or agentic products.
• Experience building security functions at high-growth SaaS companies.
• Familiarity with multi-tenant SaaS isolation models.
• Experience with confidentiality, data residency, or professional secrecy requirements.
• Supply-chain security experience, including SLSA, artifact signing, or SBOMs.

Culture & Benefits

• Ownership and outcomes are prioritised over titles and intentions.
• High standards, direct feedback, and an ego-free working style.
• Close collaboration in person through a fully office-based setup.
• Equal opportunity and an inclusive, high-performance environment.