Manager – Cybersecurity

Job Description

Join the Legal Tech Revolution at Litera

Are you ready to shape the future of how law is practiced? At Litera, we're on a mission to Raise The Bar™️ for the legal profession by delivering transformational and globally-trusted solutions to law firms and corporate legal teams worldwide. We've been a leader in legal tech innovation for 30 years and are leading the legal AI revolution to this day with most of the world's largest law firms as our clients. If you're passionate about building AI-forward solutions that scale globally and want your work to impact millions of legal professionals worldwide, this is your opportunity to be part of an extraordinary team that's elevating the craft of law.

As part of our strategic growth and commitment to fostering collaboration and operational excellence, we are transitioning to a hybrid working model. This position is based in Denver, CO and candidates should reside within reasonable commuting distance, as this role requires on-site presence at least three days per week. This hybrid approach enables us to build a collaborative and innovative work environment while maintaining the flexibility that supports both productivity and work-life balance.

Available Office Locations: | Denver |

Overview: As a Senior Manager, Security Operations at Litera, you will lead and mature our security operations function, protecting our global SaaS infrastructure and the sensitive data our clients entrust to us. You will build and lead a high-performing team responsible for threat detection, incident response, and continuous security monitoring across our cloud environments. This role requires a hands-on leader who can operate strategically while driving operational excellence day-to-day.

Key Responsibilities:

Security Operations Leadership

• Own and drive the global Security Operations program, including 24x7 monitoring, detection, and response capabilities

• Lead, mentor, and develop a team of security analysts and engineers, fostering a culture of ownership, continuous learning, and operational excellence

• Set clear goals and expectations, conduct regular performance reviews, and foster a culture of accountability, ownership, and continuous improvement

• Manage team capacity, workload prioritization, and resource allocation to ensure operational effectiveness

• Manage and optimize our security tooling stack, including Microsoft Defender suite, SIEM/SOAR platforms, and cloud-native security tools

• Champion the effective use of AI and automation to enhance team productivity, streamline repetitive tasks, and enable analysts to focus on higher-value work

Threat Detection & Incident Response

• Oversee threat detection, triage, investigation, and response activities across the enterprise

• Develop and refine incident response playbooks, ensuring rapid and effective response to security events

• Lead incident response efforts for significant security events, coordinating cross-functional teams and executive communications

Cloud Security Operations

• Manage security operations for our multi-cloud environment (Azure, AWS), including cloud security posture management using tools such as Upwind

• Partner with Infrastructure and DevOps teams to ensure secure configuration and monitoring of cloud workloads and SaaS application infrastructure

• Collaborate with development teams to integrate security monitoring into CI/CD pipelines and support secure SDLC practices

Corporate Infrastructure Security & Hardening

• Lead the hardening of Litera's corporate infrastructure through the development and enforcement of security policies across identity, devices, and data

• Own and manage conditional access policies and identity management strategies using Microsoft Entra ID, ensuring least-privilege access and strong authentication controls

• Develop and maintain device configuration and endpoint hardening policies across the corporate fleet using Microsoft Intune

• Oversee email security initiatives including mail filtering policies via Microsoft Defender for Office 365, anti-phishing controls, and user phishing simulation programs (Attack Simulation Training) to drive security awareness

• Lead data protection efforts including data classification frameworks and data loss prevention (DLP) policies using Microsoft Purview to safeguard sensitive client and corporate information

• Partner with IT and HR teams to ensure security policies are practical, enforceable, and aligned with business operations

Strategy & Continuous Improvement

• Develop and track key metrics and KPIs to measure security operations effectiveness and communicate risk posture to leadership

• Leverage AI-powered security tools and capabilities (such as Microsoft Security Copilot) to accelerate threat detection, investigation, and response

• Identify opportunities to apply AI and automation across security operations to improve efficiency, reduce manual effort, and scale the team's impact

• Stay current on emerging threats, attack techniques, and security technologies to keep our defenses ahead of adversaries

Governance & Compliance

• Develop and maintain security operations policies, standards, and procedures aligned with industry frameworks and regulatory requirements

• Support audit and compliance activities by providing evidence of security controls and operational effectiveness

Qualifications:

Required

• 8+ years of experience in information security, with at least 3 years in a management role leading security operations or SOC teams

• Deep experience with security operations in cloud environments (Azure and AWS required)

• Hands-on expertise with Microsoft Defender stack (Defender for Endpoint, Defender for Cloud, Sentinel) and cloud security posture management tools

• Proven track record of building and maturing security operations programs and leading incident response efforts

• Strong understanding of threat detection methodologies, MITRE ATT&CK framework, and modern attack techniques

• Demonstrated experience with identity and access management, conditional access policies, and Zero Trust security principles

• Hands-on experience implementing endpoint hardening, DLP, email security, and phishing simulation programs

• Experience securing SaaS application infrastructure and familiarity with secure SDLC principles

• Exceptional communication skills with the ability to convey technical risks to executive and non-technical stakeholders

• Self-directed and highly motivated with a strong sense of ownership and accountability

Preferred

• Experience with Upwind or similar cloud-native application protection platforms (CNAPP)

• Strong experience with Microsoft Entra ID (Azure AD), Intune, Microsoft Purview, and Defender for Office 365 for identity, device, email, and data protection

• Relevant certifications such as CISSP, CISM, GIAC (GSOM, GCIH, GCIA), or Azure/AWS security certifications

• Experience in a SaaS or legal technology environment

• Familiarity with SOC 2, ISO 27001, or similar compliance frameworks

Why Join Litera?

• The company culture: We emphasize helping each other grow, doing the right thing always, and being part of a journey to amplify impact, creating an exciting and fulfilling work environment

• Commitment to Employees: Our people commitment is based on what employees love most about being part of the team, focusing on tools that matter to the difference-makers in the legal world and amplifying their impact

• Global, Dynamic, and Diverse Team: Our is a global company with ambitious goals and unlimited opportunities, offering a dynamic and diverse work environment where employees can grow, listen, empathize, and problem-solve together

• Comprehensive Benefits Package: Experience peace of mind with our health insurance, retirement savings plans, generous paid time off, and a supportive work-life balance. We invest in your well-being and future, ensuring a rewarding career journey.

• Career Growth and Development: We provide career paths and opportunities for professional development, allowing employees to progress through various technical and leadership roles

Pay Transparency Notice for Denver, CO Applicants:

The annual salary range for this position is $145,000 to $175,000. Actual compensation is determined by factors including education, work experience, certifications, and other relevant qualifications.

Litera offers a comprehensive benefits package including health, dental, and vision insurance, 401(k) with company contribution, and incentive and recognition programs. All benefits are subject to eligibility requirements.