GC AI is the fastest-growing and most trusted legal AI platform for in-house legal teams. The role involves hardening and operationalizing a TypeScript-based production system with a focus on security, auditability, and customer trust, while collaborating with various teams to promote strong security practices.
Responsibilities:
- Help unify logging, security events and other auditability functionality within our platform
- Work with legal and sales to help communicate security posture, functionality, and compliance
- Work with DevOps and other engineering functions to promote and maintain strong security positions, clear auditability, tight network boundaries, and alignment with security, compliance, and customer needs
Requirements:
- Strong experience with TypeScript across backend and frontend
- Production experience with Google Cloud Platform (IAM, service accounts, project isolation)
- Experience with infrastructure as code (Terraform, Pulumi, or similar)
- Practical experience designing or implementing audit logs and SIEM experience
- Practical experience designing or implementing access controls / complex roles, organizations, and permissioning
- Practical experience designing or implementing security-relevant telemetry
- Ability to reason about real risk vs. checklist compliance
- Experience acting as a technical lead either on a team or a vertical, strong soft skills
- Familiarity with security questionnaires, vendor risk reviews, SOC 2, and audits
- Prior work in regulated or compliance-heavy environments
- Comfort working directly with customers or sales in technical contexts