Security Compliance Engineer

About Syllo Syllo is leading the Litigation AI category. In 2019, a team of litigators and engineers founded Syllo to redefine how complex litigation works. Today it is the first unified Litigation AI system built to manage the entire case lifecycle, helping legal teams decide what matters and what comes next. Backed by top-tier VCs, Syllo empowers leading law firms and Fortune 500 companies to move faster and mitigate risk. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we deliver enterprise-grade Litigation AI. We’re building a team to push the boundaries of what technology can achieve. About the role This role owns the technical security layer underlying Syllo's compliance program: Vanta implementation and monitoring, internal SSO and identity management, endpoint and device security, security monitoring, and technical incident response. It reports to the Director of Data Security Compliance, and you execute the standards the Director sets. This is an engineering role, not a policy role. You build and operate the controls and document your own work for audit. You do not author company policy. We are looking for a security engineer who has implemented controls, not just audited them. Someone comfortable across the stack from cloud infrastructure to endpoint configuration, who understands how to make compliance controls defensible in an enterprise audit. What you will do Own security infrastructure: Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring. Manage identity and access: Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack. Run endpoint security: Manage device enrollment, MDM policy, and endpoint compliance across a distributed team. Run technical incident response: Own detection, triage, and technical response. Maintain runbooks that hold up under pressure. Coordinate with the Director on the policy, legal, and client-notification dimensions. Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations. Partner with product engineering, who architect the platform itself. What you bring Technical security depth: You have implemented security controls in cloud environments (GCP preferred), not just documented them. Compliance tooling: Hands-on Vanta or comparable GRC tooling experience. You have connected evidence sources and maintained control status. Identity and access management: Experience with SSO providers (Okta, Google Workspace), IAM policy design, and least-privilege enforcement. Endpoint management: Experience with MDM platforms (Jamf, Kandji, or similar) and endpoint compliance monitoring. Incident response: You have built and run incident response runbooks, not just contributed to a binder someone else wrote. Experience and qualifications 3+ years in security engineering or DevSecOps, with hands-on implementation experience. Experience implementing Vanta or comparable compliance automation tooling. Proficiency with cloud security controls in AWS, GCP, or Azure. Security certification (Security+, AWS Security Specialty, or equivalent) preferred. Bachelor's degree in computer science, information security, or a related field preferred. Total rewards and benefits At Syllo, we believe in taking care of our team so they can focus on building the future of legal tech. Compensation: Competitive base salary + equity options. Benefits: Medical, dental, vision, and voluntary insurance options. Vacation, sick leave, and paid holidays. Access to benefit counselors and fitness class reimbursements. Equal opportunity employer We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide a fair and accessible hiring process. If you require accommodations during the application or interview stage, please let us know. United States - Remote Pay Range $180,000 — $200,000 USD