{"id":2935458,"url":"https://alion.io/job/legatics-security-engineer","title":"Security Engineer","company":{"id":172307,"name":"Legatics","domain":"legatics.com","url":"https://alion.io/company/legatics","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":67000,"max_usd":152000,"period":"year","method":"role_country_seniority_unknown","sample_n":148},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CVE","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-20T15:56:39Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T14:06:41Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Role purpose\nLegatics handles some of the world's most complex and confidential legal transactions, so security is core to our product and to client trust. As our Security Engineer, you will make our platform, cloud estate and internal systems secure by design, working hand in hand with our engineering team.\nReporting to the Head of Engineering, this is a permanent, hands-on role where you will work at least two days a week in our London office. Your core focus is application and product security, cloud, identity and endpoint security, and security monitoring and detection. You will also lead incident response and help set our approach to AI security as our teams build with agentic tools.\nFor around the first 12 months, you will also own our ISO 27001, compliance and client assurance work, supported by AI tooling we have already built for client questionnaires and ISO evidence. This is a broad role with real autonomy, suited to someone who enjoys both building and securing.\nAbout Legatics\nLegatics is one of the world's leading LegalTech scale-ups. Our legal transaction management platform enables law firms and their clients to collaborate on and close deals in an interactive online environment, providing clarity, reducing risk and saving time.\nOur customers include some of the world's top law firms, such as A&O Shearman, Hogan Lovells, Herbert Smith Freehills and King & Wood Mallesons. Legatics has been used on transactions in more than 60 countries, worth over $1 trillion.\nKey responsibilities\nApplication and product security\nCarry out technical risk assessments on new and existing product features, including permissions and access control design.\nEmbed security into our software development lifecycle through threat modelling, secure code review and security requirements for new features.\nPerform vulnerability and exploitability analysis, including CVE triage and dependency risk, and prioritise remediation with engineers based on real exposure.\nOperate and consolidate our security scanning and posture tooling, and centralise findings so they are tracked and resolved.\nReview the security risk of proposed integrations and data flows, including third-party tools and automations.\nRun a programme of continuous security testing, including penetration tests, and own remediation of findings.\nCloud, identity and endpoint security\nAudit and harden our cloud and identity posture, including SSO enforcement, conditional access and third-party app controls.\nAutomate joiner and leaver access, and run periodic user access reviews across our SaaS estate.\nOwn email security and authentication.\nOwn endpoint security across our Windows and Mac fleet, including EDR policy tuning and validation testing.\nDesign and maintain federated authentication with clear rollout guides and rollback procedures.\nSecurity monitoring and detection\nBuild, extend and maintain security monitoring across our technical estate, including log aggregation, correlation and alerting.\nTune detection rules and alerting to improve signal quality and reduce false positives.\nMaintain threat intelligence and security news pipelines to keep the team informed.\nIncident response\nLead detection, triage, containment and response for security incidents, including supply-chain compromises affecting third-party tools.\nAssess blast radius, advise on practical containment and maintain escalation and breach procedures.\nWrite clear incident communications for technical and non-technical audiences, including clients where needed.\nAI security\nShape our AI security posture, positioning security as an enabler for teams building with AI and agentic tools.\nImplement access controls, secrets scanning and detection for internal AI systems and MCP integrations, mapped to frameworks such as the OWASP Top 10 for Agentic Applications.\nResearch AI coding risks, such as slopsquatting and hallucinated packages, and feed findings into engineering practice.\nISO 27001, compliance and client assurance\nFor around the first 12 months, you will own:\nOur ISO 27001:2022 certified ISMS, including the risk register, Statement of Applicability, policies and audit evidence, and preparation for surveillance audits.\nClient information security questionnaires and security queries from our commercial team, using the AI tooling we have built to speed these up.\nClient conversations about our security posture and remediation updates, for example on penetration test findings.\nAfter this period, you will continue to contribute technical controls, evidence and expertise to our ISMS and client assurance work.\nIT operations\nSupport day-to-day IT and tooling needs as a secondary responsibility, including connector provisioning, access permissions and IAM configuration for internal data tools.\nRequirements\nWhat we need from you\nYou do not need every item below. If you have strong foundations and are keen to learn the rest, we would like to hear from you.\nEssential\nHands-on experience in a security engineering, application security or cloud security role.\nStrong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design.\nPractical experience of vulnerability management, from triage to working with engineers on remediation.\nHands-on experience securing major cloud, workspace and identity platforms, including SSO and conditional access.\nExperience with security monitoring, log analysis and SIEM or observability tooling.\nExperience of investigating and responding to security incidents.\nComfortable reading and writing code or scripts (for example Python, TypeScript or Bash) to automate security work.\nClear communication skills, able to influence engineers and explain risk to non-technical colleagues and clients.\nDesirable\nExperience with EDR tooling.\nWorking knowledge of ISO 27001, including audit evidence and client security questionnaires.\nAn interest in, or experience of, AI and agentic security risks.\nA software engineering background.\nExperience in a startup or scale-up environment.\nBenefits\nWhat we offer you:\n25 days holiday per year (plus public holidays).\nEarly Finish Fridays - on the last Friday of every month, we finish around lunchtime!\nPension with NEST.\nPrivate Medical Insurance with Bupa, giving you fast access to diagnosis and treatment when you need it.\nHealthshield Health Cash Plan, helping you claim money back on everyday healthcare like dental, optical and physio.\nPersonal Learning & Development budget.\nAccess to Mental healthcare for you and your immediate family.\nEnhanced parental leave policies so you can spend more time with your family.\nLots of opportunities for accelerated professional development and career progression.\nWork alongside a supportive and talented team with the opportunity to grow one of the world’s leading LegalTech scale-ups.\nA warm, genuinely collaborative culture and an awesome team; and\nRegular socials.\nPower in diversity\nWe put users at the heart of our design to provide legal transaction experiences that everyone loves. In order to make that a reality, we seek to foster a diverse and inclusive working environment that can empower our people to be creative, effective and innovative, to build a brand we are proud of.\nWe don’t discriminate against gender, race, religion or belief, disability, age, marital status or sexual orientation. Whatever your background may be, we welcome anyone with talent, drive and emotional intelligence. We're committed to building a diverse team and are constantly looking for ways to improve our processes to help us do that.","description_format":"text","description_chars":7590,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Software"],"lifecycle":[{"event":"open","at":"2026-10-20T15:56:39Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-22T06:27:10+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":23,"reasons":["conf:0","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/legatics-security-engineer","json_url":"https://alion.io/job/legatics-security-engineer.json","meta":{"generated_at":"2026-10-22T20:27:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4469,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172307},"rest":"https://alion.io/mcp/rest/get_company?id=172307"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flegatics-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flegatics-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flegatics-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/legatics-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flegatics-security-engineer"}]}