Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As a Principal Software Engineer focused on Security & Compliance for CoCounsel, you will set the technical direction for how CoCounsel earns and maintains the trust of legal professionals. You will own the architecture and engineering practices behind our SOC 2, ISO 27001/42001, HIPAA, and FedRAMP programs, turning compliance requirements into resilient, well-instrumented systems. This role sits at the intersection of the CoCounsel Legal engineering organization and our security, privacy, and legal/compliance teams, partnering closely with platform, identity, and AI/ML engineering.

Responsibilities

Own the compliance architecture, understanding and evolving technical controls for SOC 2 Type II, ISO 27001/42001, HIPAA, and FedRAMP requirements.
Build compliance as code, automating evidence collection, continuous control monitoring, and policy-as-code.
Engineer for production scale and sensitivity, designing encryption, key management, data residency, tenant isolation, and audit logging.
Provide technical leadership and cross-functional influence, partnering with Security, Legal, Privacy, and Product to translate requirements into engineering roadmaps.
Mentor staff and senior engineers on secure-by-design development, threat modeling, and incident response.
Establish SLOs, observability, and incident response practices for compliance-critical systems.
Build internal tooling for real-time confidence in the control environment.

Requirements

Bachelor's Degree in Computer Science, Computer Engineering, a related field, or equivalent experience.
Direct, hands-on experience building or operating production systems that achieved and maintained SOC 2 Type II, ISO 27001 (and/or 42001), and HIPAA compliance.
Experience supporting a FedRAMP authorization process (SSP development, control implementation, 3PAO assessments, or ConMon) at the Moderate or High baseline.
Deep backend engineering expertise (Python, Java, Go, or similar).
Experience with production systems on a major cloud provider (AWS preferred), including implementing controls natively.
Working knowledge of security control frameworks such as NIST 800-53, NIST CSF, or CIS Benchmarks.
Hands-on experience with identity and access management (SSO, SAML, OIDC, OAuth 2.0, RBAC/ABAC), encryption and key management, and audit logging.
Proven track record owning large, complex compliance or security initiatives end-to-end.
Excellent communication skills and ability to partner with auditors, security, legal, product, and engineering teams.

Skills

Security & Compliance
SOC 2 Type II
ISO 27001/42001
HIPAA
FedRAMP
Python
Java
Go
AWS
NIST 800-53
NIST CSF
CIS Benchmarks
Identity and Access Management
SSO
SAML
OIDC
OAuth 2.0
RBAC/ABAC
Encryption
Key Management
Audit Logging
Threat Modeling
Incident Response
GRC tooling
Compliance automation tooling
AI/LLM security controls

Location

New York City
San Francisco
Los Angeles
Irvine, CA
McLean, VA
Washington, DC

Work Type

Hybrid
Work from anywhere for up to 8 weeks per year

Experience Level

Principal Engineer
Staff engineer
Senior engineer

Education Level

Bachelor's Degree in Computer Science, Computer Engineering, a related field, or equivalent experience.
CISSP
CISM
CCSP

Salary/Compensations

$183,100 USD - $340,000 USD
$158,900 USD - $295,100 USD

Benefits

Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Market competitive health, dental, vision, disability, and life insurance programs
Competitive 401k plan with company match
Competitive vacation, sick and safe paid time off
Paid holidays
Parental leave
Sabbatical leave
Optional hospital, accident and sickness insurance
Optional life and AD&D insurance
Flexible Spending and Health Savings Accounts
Fitness reimbursement
Access to Employee Assistance Program
Group Legal Identity Theft Protection benefit
Access to 529 Plan
Commuter benefits
Adoption & Surrogacy Assistance
Employee Stock Purchase Plan

About the Company

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions.
We serve professionals across legal, tax, accounting, compliance, government, and media.
Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency.
Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments.
At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them.
Join us and help shape the industries that move society forward.

Equal Opportunity

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals.
To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law.
Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
Thomson Reuters makes reasonable accommodations for applicants with disabilities, including veterans with disabilities, and for sincerely held religious beliefs in accordance with applicable law.
If you reside in the United States and require an accommodation in the recruiting process, you may contact our Human Resources Department at HR.Leave-Expert@thomsonreuters.com.
Disability accommodations in the recruiting process may include things like a sign language interpreter, making interview rooms accessible, providing assistive technology, or other relevant accommodations.
Please note this email is not intended for general recruitment questions and we will promptly respond to inquiries regarding accommodations.
More information on requesting an accommodation here.
Learn more on how to protect yourself from fraudulent job postings here.