Software Engineer, Platform Security

LEAP Legal Software, Inc.; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid working flexibility

Wellbeing day

Free gym membership

Corporate dental plan

Weekly office massages

Catered lunch & breakfast

Job summary

LEAP Dev is building security-focused software for LEAP's Legal Practice Management solutions. This role sits in the Platform Security team and focuses on adding security capabilities across LEAP products, plus building tooling to help the team triage findings and surface risk.

You will collaborate with product and platform engineering to implement secure design patterns, automate security workflows, and continuously improve the security posture of LEAP’s SaaS offerings.

Qualifications

• Around five or more years writing and shipping production software with ownership of what you built.
• Strong at least one of C#, TypeScript, Python, or Go, and able to pick up another.
• Experience designing secure web applications and knowing how they get attacked.
• Experience building on AWS.
• Good judgment to balance security controls with friction and communicate it to engineers.
• Comfort working with people who do not report to you and influence changes.

Responsibilities

• Design and ship security features for LEAP products from design through rollout and support.
• Build internal tools and automation to accelerate the security team.
• Collaborate with product and platform engineering to agree on what to build and drive adoption.
• Write clear, well-tested code that other engineers can rely on.
• Incorporate security thinking early in design discussions, when direction changes are cheap.
• Decide what to build in-house and what to buy.

Skills

C#

TypeScript

Python

Go

AWS

Security mindset

Communication

Tools

CI/CD pipelines

Terraform

Docker

Kubernetes

Job description

About LEAP Dev

LEAP Dev is the “Software House” powering LEAP Legal Software, the leading provider of Legal Practice Management Solutions in the world. We’re part of ATI Global – one of the largest international LegalTech companies. For more than 30 years, our curiosity and commitment to continual improvement has kept us reimagining productivity tools for lawyers and their staff to support our guiding purpose, to ‘Help lawyers who help people’. The market leading software we develop and support is used by more than 70,000 lawyers and their staff in small and medium sized law firms.

Working alongside our team of passionate high achievers, you’ll join a fast-growing technology business where things seldom stay the same for long. With more than 1000 smart, caring and ambitious ‘LEAPsters’ working together across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland, Poland and New Zealand, you’ll find yourself in good company here.

Meet the Security team

Our Platform Security team protects LEAP's products and the data our clients trust us with. That data belongs to law firms and, through them, to people going through some of the harder moments of their lives. Getting it right matters.

Most security teams buy tools and write policies. We do that too, but we also build. This role sits inside the security team and writes the code that makes our products safer, rather than filing tickets asking someone else to.

Our Platform Security team is growing and we’re looking to hire our first mid to senior Software Engineer to join the team, so you will help shape what we build and how.

What you'll do

Your main focus is building security capability for LEAP products. Security, Compliance and SIEM Integrations are the first piece of work we have scoped.What follows will depend on where the risk turns out to be, and you will have a real say in deciding that. You will design that work, build it, and then work with product teams to get it adopted properly rather than half-adopted.

The second part of the job is building the tooling our security team runs on. You will build software that increases what the team can do: triaging findings faster, surfacing risk we cannot currently see, supporting our GRC function, and finding and exploiting vulnerabilities in our own products before anyone else does. The more of this we automate, the more time the team spends on the problems that genuinely need a person.

Both halves have the same goal. We want LEAP engineers to be able to build securely without having to become security experts first.

To make this happen, you will:

• Design and ship security features for LEAP products, owning them from design document through rollout and ongoing support
• Build internal tools and automation that make the security team faster and better informed
• Work directly with product and platform engineering teams to agree on what gets built, and then help them adopt it
• Write code that other engineers will read and depend on, so it needs to be clear and well tested
• Bring security thinking into design discussions early, when changing direction is still cheap
• Help us decide what to build ourselves and what to buy

What you'll bring

We are open on where you are coming from. If you are a software engineer who has been curious about security and wants a genuine way into it, this is a good role for that. You will carry on building, with a team of security specialists around you to learn the rest from. If you already work in security and want to spend more of your week writing code than writing findings, that works too.

What we need either way:

• Around five or more years writing and shipping production software, with real ownership of what you built after it launched
• Strength in at least one of C#, TypeScript, Python, or Go, and the confidence to pick up another
• Working knowledge of how web applications get attacked, and how to design so they don't
• Experience building on AWS
• The judgement to know when a security control is worth the friction it creates, and the communication skills to make that case to an engineer who disagrees with you
• Comfort working with people who do not report to you and getting them to change how they build

Useful, but we will teach you if you don't have it:

• Multi-tenant SaaS, particularly tenant isolation and the ways it quietly fails
• Security in AI and LLM applications, which is increasingly relevant to us
• Infrastructure as code, CI/CD pipelines, and container security
• Any prior exposure to SOC 2, ISO 27001, or similar

We would rather hire someone who can reason from first principles about a problem they have never seen than someone with a longer certification list. If you meet most of the above but not all of it, apply anyway.

You are the type of person who

LEAP is an inclusive, people-first company committed to breaking down institutional barriers that keep people from reaching their potential. If you meet some, but not all the requirements above, we encourage you to still submit your application.

Why join LEAP?

• Your work matters. Helping lawyers help people sits at the heart of everything we do. We solve real world problems that improve and support local, everyday law firms. So they can do their best work for the people in the communities they serve.
• Make an impact. You won’t be another ‘cog in the wheel’ here. We give full trust and autonomy for you to be heard, to work on big & complex projects – and to make a real difference.
• Work with a group of authentic, passionate people who love what they do.
• Well-funded and global. LEAP is the leading provider of Legal Practice Management Solutions across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland and New Zealand. We're part of ATI – one of the largest international LegalTech companies.
• Flexible and hybrid working. We’d like to find this person in Sydney, but we want you to work in a way that suits you and we're open to flexible arrangements that support you.
• Grow your career with us. Our founder Christian Beck has been building legal tech businesses for over 30 years. There are opportunities galore to expand your career based on where your interests lie. We’re not afraid to pivot based on market conditions - you will always have the opportunity to stay ahead of the curve and do your best work here.
• Have fun with us. Celebrations. Socials. Sports teams. Access to sailing and yacht events.
• We value your well-being - enjoy an additional paid wellbeing day every year, free gym membership, corporate dental plan and weekly massages in the office.
• Work in a new, beautiful office space – with a catered lunch and breakfast every week, fully stocked kitchen and an on-site barista.
• Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence.

#LI-AE1