Principal Software Engineer, Security & Compliance

About the role

As a Principal Software Engineer focused on Security & Compliance, you will define the technical direction for CoCounsel’s trust framework, ensuring law firms, corporate legal departments, and government agencies can rely on our platform with privileged and regulated data.

Key responsibilities

• Own the compliance architecture for SOC 2 Type II, ISO 27001/42001, HIPAA, and FedRAMP (Moderate/High) across infrastructure, data pipelines, and AI systems.
• Implement compliance-as-code, automating evidence collection, continuous control monitoring, and policy-as-code to maintain observable compliance state.
• Design encryption, key management, data residency, tenant isolation, and audit logging for high‑volume, sensitive legal documents and AI interactions.
• Partner with Security, Legal, Privacy, and Product teams to translate regulatory requirements into engineering roadmaps and mentor engineers on secure‑by‑design practices.
• Establish SLOs, observability, and incident response for compliance‑critical systems, building internal dashboards and alerting tools.

Required profile

• Bachelor’s degree in Computer Science, Engineering or equivalent experience.
• Hands‑on experience building production systems that achieved and maintained SOC 2 Type II, ISO 27001 (or 42001), and HIPAA compliance.
• Experience supporting FedRAMP authorization at Moderate or High baseline.
• Deep backend engineering expertise (Python, Java, Go) on a major cloud provider (AWS preferred).
• Strong knowledge of security frameworks such as NIST 800‑53, NIST CSF, or CIS Benchmarks.

Required skills

• Python, Java, Go
• AWS cloud services
• SOC 2, ISO 27001/42001, HIPAA, FedRAMP
• Identity & access management (SSO, SAML, OIDC, OAuth 2.0, RBAC/ABAC)
• Encryption, key management, audit logging
• NIST 800‑53, NIST CSF, CIS Benchmarks

What we offer

• Hybrid work model with flexible remote options.
• Flex My Way policies for work‑life balance, including up to 8 weeks per year of work‑from‑anywhere.
• Career development programs, tuition reimbursement, and continuous learning opportunities.
• Comprehensive benefits: flexible vacation, mental health days, Headspace access, retirement savings, and employee incentive programs.
• Inclusive culture recognized for belonging, flexibility, and social impact initiatives.