Compliance Security Engineer

About Syllo

Syllo is defining the Litigation AI category. We are the first unified platform designed to autonomously manage the entire litigation lifecycle end-to-end. Founded in 2019 by a team of litigators and engineers, Syllo enables legal teams to securely harness the power of AI across any matter, regardless of complexity or scale. Our technology supports Fortune 500 companies and AmLaw 200 firms managing their most complex litigation portfolios. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we are the market leader in enterprise-grade litigation AI. This role owns the technical security layer underlying Syllos compliance program: Vanta implementation and monitoring, internal SSO and identity management, endpoint and device security, security monitoring, and technical incident response. It reports to the Director of Data Security Compliance, and you execute the standards the Director sets. This is an engineering role, not a policy role. You build and operate the controls and document your own work for audit. You do not author company policy.
Someone comfortable across the stack from cloud infrastructure to endpoint configuration, who understands how to make compliance controls defensible in an enterprise audit.
Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Manage device enrollment, MDM policy, and endpoint compliance across a distributed team.
Coordinate with the Director on the policy, legal, and client-notification dimensions.
Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations. Partner with product engineering, who architect the platform itself.
You have implemented security controls in cloud environments (GCP preferred), not just documented them.
Compliance tooling: Experience with SSO providers (Okta, Google Workspace), IAM policy design, and least-privilege enforcement.
Experience with MDM platforms (Jamf, Kandji, or similar) and endpoint compliance monitoring.
3+ years in security engineering or DevSecOps, with hands-on implementation experience.
~ Experience implementing Vanta or comparable compliance automation tooling.
~ Proficiency with cloud security controls in AWS, GCP, or Azure.
~ Security certification (Security+, AWS Security Specialty, or equivalent) preferred.
~ Bachelors degree in computer science, information security, or a related field preferred.

At Syllo, we believe in taking care of our team so they can focus on building the future of legal tech.
Compensation:

Competitive base salary + equity options.
Benefits:

Medical, dental, vision, and voluntary insurance options. Vacation, sick leave, and paid holidays. Access to benefit counselors and fitness class reimbursements.
We celebrate diversity and are committed to creating an inclusive environment for all employees. If you require accommodations during the application or interview stage, please let us know.
United States - Remote Pay Range
$