About the role
About PointOne
PointOne is reinventing how law firms operate. We build infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies.
Our AI timekeeper helps attorneys capture billable time automatically and provides rich insights that transform how legal work is managed. We're a Tier 1 venture-backed startup (Y Combinator, Bessemer, 8VC, General Catalyst) made up of engineers (Google, Applied Intuition, Jane Street) and ex-attorneys. Alongside a recent Series A round and rapid customer adoption, we're expanding our engineering team to keep up with overwhelming demand.
The Role
Let’s start with what this isn’t:
- Not a GRC or paperwork-heavy compliance role
- Not a vulnerability-scanning-only position
- Not a “turn on GuardDuty and call it done” role
You will be shaping critical systems and making architectural decisions that materially affect risk and resilience.
This is a hands-on engineering role at the intersection of security, cloud architecture, and platform optimization.
You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.
What You’ll Own
Infrastructure Security
- Design and enforce least-privilege IAM across services
- Implement permission boundaries and SCP strategy
- Reduce attack surface across networking and service exposure
- Improve secrets management and KMS key segmentation
- Lead threat modeling across core systems
- Design blast-radius containment strategies
Detection & Response
- Strengthen logging, monitoring, and anomaly detection
