Corporate Security Engineer

About this role

Legora seeks a Corporate Security Engineer to design and own the security of the company's internal environment—identities, devices, SaaS applications, and AI tools. You'll build controls as code, govern AI adoption, and establish zero-trust architecture across the organization, partnering with IT teams to keep Legora's operating root of trust secure.

What you'll do

• Manage non-human identity and service accounts with short-lived credentials, tight scoping, and revocation at scale
• Design authorization models for AI agents with least-privilege access, audit trails, and revocable delegated authority
• Govern employee AI and LLM usage, enforce data protection on sanctioned paths, and make secure workflows fast
• Advance identity security with phishing-resistant MFA, SSO, and continuous access evaluation to revoke compromised sessions
• Improve SaaS security posture through continuous monitoring of configurations, OAuth grants, admin permissions, and shadow IT
• Own endpoint trust, device health gating via zero-trust conditional access, and DLP controls across endpoints, SaaS, and AI egress

What they're looking for

• Python and Infrastructure-as-Code (Terraform)
• Enterprise identity platforms (Okta and/or Microsoft Entra ID)
• Zero-trust architecture and conditional access
• SaaS security posture management (SSPM)
• Mobile device management (MDM) and endpoint detection & response (EDR)
• Data loss prevention (DLP) and insider risk detection
• AI/LLM security governance and agent authorization
• Google Workspace, Slack, and SaaS OAuth security