Security Engineering Director
Stockholm HQ • FullTime
Posted 11h ago
Remote Work Policy
On-site
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Legora is seeking a Director of Security Engineering to establish and lead the security function across its product, platform, and cloud infrastructure. This role is crucial for maintaining the trust of Legora's customers, who rely on the AI-native workspace for sensitive legal matters. The focus will be on building an engineering-led security approach with secure defaults, automation, and measurable risk reduction, rather than reactive measures. The Director will define security standards, set strategic roadmaps, and collaborate closely with engineering leadership to anticipate challenges and influence technical direction.
Responsibilities
- Define security standards for Legora's product, platform, and customer commitments.
- Set security roadmap and investment priorities, identifying emerging risks.
- Partner with CTO and engineering leadership on architecture and technical direction.
- Build tools, paved paths, and secure defaults to enable secure software development.
- Embed security into the software lifecycle through reviews, standards, and automation.
- Drive initiatives in secrets management, workload identity, and Kubernetes hardening using infrastructure as code.
- Develop automated detection and response capabilities, supported by penetration testing.
- Own incident playbooks, exercises, and investigations.
- Threat-model the multi-tenant AI platform and define safe boundaries for coding agents.
- Hire and develop senior security engineers in Application Security, Detection Engineering & Response, and Cloud & Platform Security.
- Provide team direction to solve underlying problem themes.
- Support enterprise customers through security discussions and questionnaires.
Requirements
- Experience leading and scaling a security engineering function through rapid growth, ideally in a high-threat environment.
- Engineering background with strong architectural judgment.
- Experience influencing technical direction at scale.
- Understanding of application security, detection engineering, and cloud/platform security.
- Ability to operate as a peer to engineering leadership.
- Clear communication skills, translating risk into engineering terms.
- Ability to influence without mandates.