Back to jobs
New

Security Compliance Engineer

Remote

About Syllo

Syllo is defining the Litigation AI category. We are the first unified platform designed to autonomously manage the entire litigation lifecycle end-to-end. Founded in 2019 by a team of litigators and engineers, Syllo enables legal teams to securely harness the power of AI across any matter, regardless of complexity or scale. Our technology supports Fortune 500 companies and AmLaw 200 firms managing their most complex litigation portfolios. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we are the market leader in enterprise-grade litigation AI. Backed by top-tier VCs, we are at a clear inflection point — the team has doubled in the last six months and growth is accelerating.

About the role

This role owns the technical security layer underlying Syllo's compliance program: Vanta implementation and monitoring, internal SSO and identity management, endpoint and device security, security monitoring, and technical incident response. It reports to the Director of Data Security Compliance, and you execute the standards the Director sets. This is an engineering role, not a policy role. You build and operate the controls and document your own work for audit. You do not author company policy.

We are looking for a security engineer who has implemented controls, not just audited them. Someone comfortable across the stack from cloud infrastructure to endpoint configuration, who understands how to make compliance controls defensible in an enterprise audit.

What you will do

  • Own security infrastructure: Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
  • Manage identity and access: Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
  • Run endpoint security: Manage device enrollment, MDM policy, and endpoint compliance across a distributed team.
  • Run technical incident response: Own detection, triage, and technical response. Maintain runbooks that hold up under pressure. Coordinate with the Director on the policy, legal, and client-notification dimensions.
  • Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations. Partner with product engineering, who architect the platform itself.

What you bring

  • Technical security depth: You have implemented security controls in cloud environments (GCP preferred), not just documented them.
  • Compliance tooling: Hands-on Vanta or comparable GRC tooling experience. You have connected evidence sources and maintained control status.
  • Identity and access management: Experience with SSO providers (Okta, Google Workspace), IAM policy design, and least-privilege enforcement.
  • Endpoint management: Experience with MDM platforms (Jamf, Kandji, or similar) and endpoint compliance monitoring.
  • Incident response: You have built and run incident response runbooks, not just contributed to a binder someone else wrote.

Experience and qualifications

  • 3+ years in security engineering or DevSecOps, with hands-on implementation experience.
  • Experience implementing Vanta or comparable compliance automation tooling.
  • Proficiency with cloud security controls in AWS, GCP, or Azure.
  • Security certification (Security+, AWS Security Specialty, or equivalent) preferred.
  • Bachelor's degree in computer science, information security, or a related field preferred.

Total rewards and benefits

At Syllo, we believe in taking care of our team so they can focus on building the future of legal tech.

Compensation: Competitive base salary + equity options.

Benefits: Medical, dental, vision, and voluntary insurance options. Vacation, sick leave, and paid holidays. Access to benefit counselors and fitness class reimbursements.

Growth: Annual learning and development budget and real career growth in a fast-scaling organization.

Equal opportunity employer

We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide a fair and accessible hiring process. If you require accommodations during the application or interview stage, please let us know.

United States - Remote Pay Range

$180,000 - $200,000 USD

Create a Job Alert

Interested in building your career at Syllo? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...

Please answer based on your current work authorization status. If you are authorized to work in the U.S. today, select “Yes.”

Select...

This includes current or future employer support for statuses such as H-1B, O-1, or TN.

 
 

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Syllo’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...