Security Compliance Engineer

About Syllo

Syllo is defining the Litigation AI category. We are the first unified platform designed to autonomously manage the entire litigation lifecycle end-to-end. Founded in 2019 by a team of litigators and engineers, Syllo enables legal teams to securely harness the power of AI across any matter, regardless of complexity or scale. Our technology supports Fortune 500 companies and AmLaw 200 firms managing their most complex litigation portfolios. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we are the market leader in enterprise-grade litigation AI. Backed by top-tier VCs, we are at a clear inflection point — the team has doubled in the last six months and growth is accelerating.

About the role

This role owns the technical security layer underlying Syllo's compliance program: Vanta implementation and monitoring, internal SSO and identity management, endpoint and device security, security monitoring, and technical incident response. It reports to the Director of Data Security Compliance, and you execute the standards the Director sets. This is an engineering role, not a policy role. You build and operate the controls and document your own work for audit. You do not author company policy.

We are looking for a security engineer who has implemented controls, not just audited them. Someone comfortable across the stack from cloud infrastructure to endpoint configuration, who understands how to make compliance controls defensible in an enterprise audit.

What you will do

• Own security infrastructure: Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
• Manage identity and access: Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
• Run endpoint security: Manage device enrollment, MDM policy, and endpoint compliance across a distributed team.
• Run technical incident response: Own detection, triage, and technical response. Maintain runbooks that hold up under pressure. Coordinate with the Director on the policy, legal, and client-notification dimensions.
• Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations. Partner with product engineering, who architect the platform itself.

What you bring

• Technical security depth: You have implemented security controls in cloud environments (GCP preferred), not just documented them.
• Compliance tooling: Hands-on Vanta or comparable GRC tooling experience. You have connected evidence sources and maintained control status.
• Identity and access management: Experience with SSO providers (Okta, Google Workspace), IAM policy design, and least-privilege enforcement.
• Endpoint management: Experience with MDM platforms (Jamf, Kandji, or similar) and endpoint compliance monitoring.
• Incident response: You have built and run incident response runbooks, not just contributed to a binder someone else wrote.

Experience and qualifications

• 3+ years in security engineering or DevSecOps, with hands-on implementation experience.
• Experience implementing Vanta or comparable compliance automation tooling.
• Proficiency with cloud security controls in AWS, GCP, or Azure.
• Security certification (Security+, AWS Security Specialty, or equivalent) preferred.
• Bachelor's degree in computer science, information security, or a related field preferred.

Total rewards and benefits

At Syllo, we believe in taking care of our team so they can focus on building the future of legal tech.

Compensation: Competitive base salary + equity options.

Benefits: Medical, dental, vision, and voluntary insurance options. Vacation, sick leave, and paid holidays. Access to benefit counselors and fitness class reimbursements.

Equal opportunity employer

We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide a fair and accessible hiring process. If you require accommodations during the application or interview stage, please let us know.