Member of Technical Staff, Security Engineer

About the role

As a Security Engineer at Crosby, you'll play a critical role in designing and implementing the security foundations of our platform. You’ll be responsible for protecting sensitive legal data, securing our infrastructure, and embedding best-in-class security practices across the engineering organization.

You’ll work closely with engineering, product, and legal teams to identify risks, implement controls, and ensure our systems meet the highest standards of security and compliance. This role is for someone who is both deeply technical and highly pragmatic — able to balance strong security guarantees with the speed required in a fast-moving environment.

What you'll do

• Own application and infrastructure security: Design and implement security controls across our application, APIs, and cloud infrastructure.
• Protect sensitive data: Build systems and processes to safeguard confidential legal and customer data.
• Drive security best practices: Establish and enforce secure development practices, including code reviews, threat modeling, and vulnerability management.
• Monitor and respond: Implement monitoring, alerting, and incident response processes to detect and respond to security threats.
• Ensure compliance readiness: Support security and compliance efforts (e.g., SOC 2), including documentation, controls, and audits.
• Collaborate across teams: Partner with engineering and product teams to embed security into the development lifecycle without slowing velocity.

Who you are

• 4+ years of experience in security engineering, infrastructure security, or a related role
• Strong understanding of application security, cloud security (e.g., AWS/GCP), and common vulnerability classes
• Experience securing production systems, including authentication, authorization, and data protection
• Proficient in at least one programming language (e.g., Python, Go) and comfortable working with engineering teams
• Experience with security tooling, monitoring systems, and incident response workflows
• Highly pragmatic — able to prioritize risks and implement effective, scalable solutions
• Strong ownership mindset with the ability to operate independently in ambiguous environments
• Clear communicator who can work effectively with engineers, product teams, and leadership

Benefits & Perks

• Unlimited PTO
• Lunch & dinner in the office every day
• Medical insurance (multiple plan options through Anthem & Cigna)
• HSA or FSA, depending on your plan choice
• Dental insurance
• Vision insurance
• One Medical membership
• 401(k) match
• In-office desk setup stipend

Equal Opportunity

Pursuant to New York Labor Law Section 194-b, the US Pay Range for this position is listed in the job post. Final compensation will be determined based on skills, experience, and qualifications.