AI Security Engineer

Responsibilities

• Be the internal security lead on our Greenfield Product with full access to source code, cloud infrastructure, and configurations.
• Ensure the product is enterprise-ready before customers go near it.
• Work alongside the Greenfield Product hardening squad for collaboration.
• Act as day-to-day counterpart to external security and pen test partners.
• Build and implement controls, not writing recommendations for others to action.
• Own AWS security posture including account structure, IAM, RBAC, logging, and monitoring.
• Manage SOC 2 Type II controls and evidence for the Greenfield Product on AWS.
• Handle application-level hardening including authentication, API rate limiting, web security headers, etc.
• Manage penetration test engagements with external firms, triaging findings, and closing them rapidly.
• Put automated processes in place for continuous security validation.
• Ensure data residency requirements are met for US and UK law firm customers.

Qualifications

• Deep, hands-on security engineering experience, building and implementing controls, not just advising
• Strong AWS security knowledge: IAM, account structure, Well-Architected Framework, CloudTrail, GuardDuty, Config, Security Hub
• Driven a real SOC 2 Type II engagement: controls, evidence collection, and audit preparation, not just policy documentation
• Application security experience: auth, RBAC, common web vulnerabilities, ability to implement fixes directly in code and config
• Managed external pen test engagements: scoping, triaging findings, and closing them
• Comfortable working at pace with minimal hand-holding in a small, senior team
• Available immediately or within days, not weeks.

#J-18808-Ljbffr…