Software Engineer, Platform Security

About LEAP Dev

LEAP Dev is the "Software House" powering LEAP Legal Software, the leading provider of Legal Practice Management Solutions in the world. We're part of ATI Global - one of the largest international LegalTech companies. For more than 30 years, our curiosity and commitment to continual improvement has kept us reimagining productivity tools for lawyers and their staff to support our guiding purpose, to 'Help lawyers who help people'. The market leading software we develop and support is used by more than 70,000 lawyers and their staff in small and medium sized law firms. Working alongside our team of passionate high achievers, you'll join a fast-growing technology business where things seldom stay the same for long. With more than 1000 smart, caring and ambitious 'LEAPsters' working together across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland, Poland and New Zealand, you'll find yourself in good company here. Meet the Security team

Our Platform Security team protects LEAP's products and the data our clients trust us with. That data belongs to law firms and, through them, to people going through some of the harder moments of their lives. Getting it right matters. Most security teams buy tools and write policies. We do that too, but we also build. This role sits inside the security team and writes the code that makes our products safer, rather than filing tickets asking someone else to. Our Platform Security team is growing and we're looking to hire our first mid to senior Software Engineer to join the team, so you will help shape what we build and how. What you'll do

Your main focus is building security capability for LEAP products. Security, Compliance and SIEM Integrations are the first piece of work we have scoped. What follows will depend on where the risk turns out to be, and you will have a real say in deciding that. You will design that work, build it, and then work with product teams to get it adopted properly rather than half-adopted. The second part of the job is building the tooling our security team runs on. You will build software that increases what the team can do: triaging findings faster, surfacing risk we cannot currently see, supporting our GRC function, and finding and exploiting vulnerabilities in our own products before anyone else does. The more of this we automate, the more time the team spends on the problems that genuinely need a person. Both halves have the same goal. We want LEAP engineers to be able to build securely without having to become security experts first. To make this happen, you will: Design and ship security features for LEAP products, owning them from design document through rollout and ongoing support Build internal tools and automation that make the security team faster and better informed Work directly with product and platform engineering teams to agree on what gets built, and then help them adopt it Write code that other engineers will read and depend on, so it needs to be clear and well tested Bring security thinking into design discussions early, when changing direction is still cheap Help us decide what to build ourselves and what to buy What you’ll bring

We are open on where you are coming from. If you are a software engineer who has been curious about security and wants a genuine way into it, this is a good role for that. You will carry on building, with a team of security specialists around you to learn the rest from. If you already work in security and want to spend more of your week writing code than writing findings, that works too. What we need either way: Around five or more years writing and shipping production software, with real ownership of what you built after it launched Strength in at least one of C#, TypeScript, Python, or Go, and the confidence to pick up another Working knowledge of how web applications get attacked, and how to design so they don't Experience building on AWS The judgement to know when a security control is worth the friction it creates, and the communication skills to make that case to an engineer who disagrees with you Comfort working with people who do not report to you and getting them to change how they build Useful, but we will teach you if you don't have it: Multi-tenant SaaS, particularly tenant isolation and the ways it quietly fails Security in AI and LLM applications, which is increasingly relevant to us Infrastructure as code, CI/CD pipelines, and container security Any prior exposure to SOC 2, ISO 27001, or similar We would rather hire someone who can reason from first principles about a problem they have never seen than someone with a longer certification list. You are the type of person who LEAP is an inclusive, people-first company committed to breaking down institutional barriers that keep people from reaching their potential.

#J-18808-Ljbffr