Security Compliance Engineer

Syllo; Oregon; Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Voluntary insurance

Equity options

Paid time off

Job summary

Syllo is seeking a Security Engineer to own the technical security layer of its compliance program, implementing controls across cloud and endpoint environments. You will operate IAM policies, SSO, device management, and security monitoring while coordinating with cross-functional teams.

You will build incident response runbooks, maintain audit-ready documentation, and ensure data segregation in partnership with product engineering.

Qualifications

• 3+ years in security engineering or DevSecOps with hands-on implementation.
• Experience implementing Vanta or comparable compliance tooling.
• Proficiency with cloud security controls in AWS, GCP, or Azure.
• Experience with SSO providers (Okta, Google Workspace) and IAM policy design.
• Bachelor's degree in CS or information security preferred.

Responsibilities

• Own security infrastructure: implement, configure, and monitor SOC 2/ISO 27001 controls (Vanta, SSO, endpoint management, monitoring).
• Design and operate IAM policies, enforce least-privilege access, maintain correct SSO across stack.
• Manage device enrollment, MDM policy, and endpoint compliance for distributed teams.
• Own detection, triage, and technical response; maintain runbooks and coordinate with Director on policy and client-notification dimensions.
• Verify data segregation and enforce customer data isolation in collaboration with product engineering.

Skills

Cloud security controls

Vanta tooling

SSO & IAM design

MDM & endpoint

Incident response

Education

Bachelor's degree in CS/InfoSec

Tools

AWS

GCP

Azure

Okta

Google Workspace

Job description

About SylloSyllo is defining the Litigation AI category. We are the first unified platform designed to autonomously manage the entire litigation lifecycle end-to-end. Founded in 2019 by a team of litigators and engineers, Syllo enables legal teams to securely harness the power of AI across any matter, regardless of complexity or scale. Our technology supports Fortune 500 companies and AmLaw 200 firms managing their most complex litigation portfolios. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we are the market leader in enterprise-grade litigation AI. Backed by top-tier VCs, we are at a clear inflection point - the team has doubled in the last six months and growth is accelerating.

About the role

This role owns the technical security layer underlying Syllo's compliance program: Vanta implementation and monitoring, internal SSO and identity management, endpoint and device security, security monitoring, and technical incident response. It reports to the Director of Data Security Compliance, and you execute the standards the Director sets. This is an engineering role, not a policy role. You build and operate the controls and document your own work for audit. You do not author company policy.We are looking for a security engineer who has implemented controls, not just audited them. Someone comfortable across the stack from cloud infrastructure to endpoint configuration, who understands how to make compliance controls defensible in an enterprise audit.

What you will do

• Own security infrastructure: Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
• Manage identity and access: Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
• Run endpoint security: Manage device enrollment, MDM policy, and endpoint compliance across a distributed team.
• Run technical incident response: Own detection, triage, and technical response. Maintain runbooks that hold up under pressure. Coordinate with the Director on the policy, legal, and client-notification dimensions.
• Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations. Partner with product engineering, who architect the platform itself.

What you bring

• Technical security depth: You have implemented security controls in cloud environments (GCP preferred), not just documented them.
• Compliance tooling: Hands-on Vanta or comparable GRC tooling experience. You have connected evidence sources and maintained control status.
• Identity and access management: Experience with SSO providers (Okta, Google Workspace), IAM policy design, and least-privilege enforcement.
• Endpoint management: Experience with MDM platforms (Jamf, Kandji, or similar) and endpoint compliance monitoring.
• Incident response: You have built and run incident response runbooks, not just contributed to a binder someone else wrote.

Experience and qualifications

• 3+ years in security engineering or DevSecOps, with hands-on implementation experience.
• Experience implementing Vanta or comparable compliance automation tooling.
• Proficiency with cloud security controls in AWS, GCP, or Azure.
• Security certification (Security+, AWS Security Specialty, or equivalent) preferred.
• Bachelor's degree in computer science, information security, or a related field preferred.

Total rewards and benefits

At Syllo, we believe in taking care of our team so they can focus on building the future of legal tech.

Compensation: Competitive base salary + equity options.

• Benefits: Medical, dental, vision, and voluntary insurance options.
• Vacation, sick leave, and paid holidays.
• Access to benefit counselors and fitness class reimbursements.

Equal opportunity employer

We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide a fair and accessible hiring process. If you require accommodations during the application or interview stage, please let us know.

United States - Remote Pay Range$180,000-$200,000 USD