Security Engineer

About the Company

Crosby is the first AI-native law firm, helping ambitious companies like Cursor, Ramp, and Cognition sign commercial contracts faster. We build proprietary tools and human-in-the-loop workflows that change what's possible for corporate legal teams.

Responsibilities

• Own application and infrastructure security by designing and implementing security controls across APIs and cloud infrastructure
• Build systems and processes to safeguard confidential legal and customer data
• Establish and enforce secure development practices, including code reviews, threat modeling, and vulnerability management
• Implement monitoring, alerting, and incident response processes
• Support security and compliance efforts such as SOC 2, including documentation and audits
• Partner with engineering and product teams to embed security into the development lifecycle

Requirements

• 4+ years of experience in security engineering or infrastructure security
• Strong understanding of application security and cloud security (AWS/GCP)
• Experience securing production systems, authentication, authorization, and data protection
• Proficiency in at least one programming language such as Python or Go
• Experience with security tooling, monitoring systems, and incident response workflows
• Strong ownership mindset and ability to operate independently

Benefits

• Unlimited PTO
• Lunch & dinner in the office every day
• Medical, dental, and vision insurance
• HSA or FSA options
• One Medical membership
• 401(k) match
• In-office desk setup stipend