AI Security Engineer

Job Description

Ready to Help Shape the Future of Legal Tech?!

At Litera, we don’tjust build software,we transform how the world’s top law firms operate. Every day, we Raise TheBar™ for what’spossible through AI, innovation, and solutions that power millions of legal professionals worldwide. If you’reenergized by scale, real impact, and meaningful challenges, you’llfeel right at home here.

Where You’llWork

Hybrid: This is a hybrid role based in Denver, CO withthe expectations to be inofficeat least 3 days a week for collaboration and connection.

Why this Role Matters

Litera is advancing AI across its products and internal platforms, and this role will help ensure those systems are secure, trusted, and resilient as they scale. As AI becomes more deeply embedded in our customer experiences and development workflows, the AI Security Engineer will play a critical role in protecting sensitive data, reducing emerging AI-related risks, and strengthening confidence inLitera’sAI capabilities. This role will help turn evolving AI security standards, threat intelligence, and governance expectations into practical safeguards that support innovation without compromising security.

What You’llDeliver

• Strengthen the security ofLitera’sAI-enabled products, internal AI tools, and agentic AI infrastructure byidentifying, assessing, and reducing risks across the AI lifecycle.

• Help Product, Engineering, GRC, IT, and Security teams make informed decisions about AI adoption, vendor use, model integrations, data handling, and acceptable use.

• AdvanceLitera’sdefenses against emerging AI-specific threats, including prompt injection, jailbreaking, insecure outputs, RAG data poisoning, model abuse, data leakage, and indirect context manipulation.

• Improve the security of AI-integrated product surfaces, including LLM-connected applications, MCP server integrations, agent workflows, tool-call authorization boundaries, and SaaS application interconnects.

• Build andmaintainscalable AI security controls, tooling, testing pipelines, detection logic, playbooks, and documentation that continuouslyvalidateAI system behavior against security expectations.

• Extend identity governance andsecretsmanagement practices to cover AI agents and non-human identities, including access scoping, credential lifecycle, inventory, deprovisioning, and audit logging.

• Serve as a technical security partner withinLitera’sAI governance program by supporting AI impact assessments, model risk registers, secure-use policies, and control alignment with evolving AI standards.

• RepresentLitera’sAI security posture with internal and external stakeholders by supporting customer questionnaires, enterprise security reviews, due diligence requests, audit evidence, and sales-related security discussions.

We’recommitted to creating an inclusive environment. If you need accommodationsat any point in the process or in the role, we’rehere to support you.

What You’llBring

Must-Haves:

• 3-6 years of cybersecurity experience, with at least 1-2 years focused on AI/ML security, application security, or a related combination within a cloud-native SaaS or enterprise software environment.

• Working knowledge of LLM security risks and mitigations, including OWASP LLM Top 10 concepts such as prompt injection, insecure output handling, RAG poisoning, model denial of service, and sensitive information disclosure.

• Hands-on experience with application security fundamentals, including threat modeling, SAST/DAST, API security,secretsmanagement, secure SDLC practices, and CI/CD pipeline security.

• Technicalproficiencywith scripting, automation, security tooling, and AI/ML-related technologies such asLangChain, RAG pipelines, vector databases, Azure OpenAI, Amazon Bedrock, or similar platforms.

• Experience securing Azure and/or AWS environments, including IAM, network segmentation, containers, Kubernetes, infrastructure-as-code scanning, and cloud-hosted AI workloads.

• Strong communicationand analytical skills, with the ability to explain complex AI security risks to technical and non-technical audiences and independently drive remediation.

Nice to Haves:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field; equivalent professional experience also considered. Relevant certifications such as CAISP, CISSP, CEH, GPEN, or AWS/Azure Security specialties are a plus.

• Experience with AI red teaming, adversarial ML testing tools such as Garak,PyRIT, orCounterfit, AI bug bounty programs, or AI security research.

• Familiarity with AI governance frameworks and standards such as ISO 42001, NIST AI RMF, the EU AI Act, SOC 2 Type II, or ISO 27001 audit support.

• Experience in B2B SaaS, legal technology, regulated professional services, enterprise customer security reviews, RFP responses, due diligence questionnaires, or security-focused sales support.

We know great candidates don’talways check every box. If you’reexcited about this role, we encourage you to apply.

What You’llExperience

• A team that shows up. Work alongside people who collaborate, support one another, and lead with integrity.

• Global Reach. Partner with teams around the world to solve complex challenges that matter.

• Real opportunity for growth. Expand your impact through meaningful stretch opportunities, visibilityand career development.

• AI-driven innovation. Work at the intersection of legal technology, customer outcomes, and cutting-edgeAI.

Pay Transparency for Colorado Applicants

The base salary range for this role is $150,000 to $178,000 USD. Final compensation will be determined based on experience, skills, education, and other relevant qualifications. This role is also eligible to participate in a company bonus plan.In addition to base salary, Litera offers a comprehensive benefits package, including medical, dental, and vision coverage, a 401(k) with company match, and incentive and recognition programs. Benefits are subject to eligibility requirements.

#LI-Hybrid

Literais an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.