What are the responsibilities and job description for the Security Engineer position at D24 Search?
DevSecOps/ Security Engineer
Palo Alto, CA (onsite)
Up to $210K Equity
My client is redefining the future of legal work with AI-powered Augmented Intelligence, enabling Fortune 500 legal teams to move faster, manage risk more effectively, and unlock new business value. Backed by $105M in Series A funding led by General Catalyst, we’re building a category-defining platform that blends AI-driven automation with human expertise, transforming legal from a cost center into a strategic growth driver.
We are looking for a Security Engineer to own and build out the security program at a fast-growing AI company serving Fortune 500 legal teams. This is a sole security hire – you will be the hands-on operator partnering directly with the VCSO and engineering leadership to harden infrastructure, application, and supply chain security across the stack.
The ideal candidate has seen how great security systems are built at a larger organization and then rolled up their sleeves to build security from scratch at a startup. You need strong DevSecOps chops – comfort with cloud infrastructure (Azure/AWS), AppSec awareness, and the judgment to know what to prioritize at each stage of rapid growth. This role supports federal customer deployments, so experience securing cloud workloads for regulated environments is a major plus.
Requirements:
- 4 years of experience in DevSecOps / security engineering, with cloud security (AWS/Azure)
- First or early security engineer at a VC- backed startup or built security program from scratch for a new/greenfield project at a fast- moving big tech company (e. g. , Meta, Atlassian, Pinterest)
- DevSecOps background: blend of AppSec awareness and hands- on DevOps/infra security
- Cloud security expertise on AWS or Azure
- Combination of big company and startup experience as a security engineer
- Experience supporting external audits (SOC2 Type II, ISO27001) and federal workloads
What you will be doing
- Standing up and owning the end-to-end security program – from infrastructure security and supply chain integrity to AppSec best practices across the engineering org
- Securing cloud infrastructure (Azure/AWS) and supporting federal customer deployment workloads with appropriate security controls
- Auditing open-source dependencies, build tooling, and CI/CD pipelines to ensure the entire software supply chain is safe and secure
- Partnering with the VCSO, IT team, and engineering leadership to make pragmatic security decisions – knowing when to invest for the long term vs. solve for this week
- Leading external compliance audits (SOC2 Type II, ISO27001) and driving ongoing control monitoring and remediation
Why candidates should join
- We build AI-powered "Digital Twins" that encode how Fortune 500 legal teams think — embedding expert-grade decision engines directly into Microsoft 365, ServiceNow, and iManage. They're turning legal from a cost center into a self-service growth driver.
- Backed by $105M Series A from General Catalyst – this is a rocketship with serious momentum and top-tier investors behind it.
- You'll own the entire security program as the sole security engineer hire — setting up DevSecOps, securing federal workloads, and hardening cloud infrastructure end-to-end. High autonomy with direct partnership alongside the CISO and Head of Engineering.
Salary : $185,000 - $210,000