Manager, Cybersecurity

Job Description

Join the Legal Tech Revolution  you ready to shape the future of how law is practiced? At Litera, we're on a mission to Raise The Bar for the legal profession by delivering transformational and globally‑trusted solutions to law firms and corporate legal teams worldwide. We’ve been a leader in legal tech innovation for 30 years and are leading the legal AI revolution with most of the world’s largest law firms as our clients.

If you’re passionate about building AI‑forward solutions that scale globally and want your work to impact millions of legal professionals worldwide, this is your opportunity to be part of an extraordinary team that’s elevating the craft of law.

As part of our strategic growth and commitment to fostering collaboration and operational excellence, we are transitioning to a hybrid working model. This position is based in Denver, CO and candidates should reside within reasonable commuting distance, as this role requires on‑site presence at least three days per week. This hybrid approach enables us to build a collaborative and innovative work environment while maintaining the flexibility that supports both productivity and work‑life balance.

Available Office Locations:
Denver

As a Senior Manager, Security Operations at Litera, you will lead and mature our security operations function, protecting our global SaaS infrastructure and the sensitive data our clients entrust to us. You will build and lead a high‑performing team responsible for threat detection, incident response, and continuous security monitoring across our cloud environments. This role requires a hands‑on leader who can operate strategically while driving operational excellence day‑to‑day.

• Security Operations Leadership
  • Own and drive the global Security Operations program, including 24x7 monitoring, detection, and response capabilities.
  • Lead, mentor, and develop a team of security analysts and engineers, fostering a culture of ownership, continuous learning, and operational excellence.
  • Set clear goals and expectations, conduct regular performance reviews, and foster a culture of accountability, ownership, and continuous improvement.
  • Manage team capacity, workload prioritization, and resource allocation to ensure operational effectiveness.
  • Manage and optimize our security tooling stack, including Microsoft Defender suite, SIEM/SOAR platforms, and cloud‑native security tools.
  • Champion the effective use of AI and automation to enhance team productivity, streamline repetitive tasks, and enable analysts to focus on higher‑value work.
• Threat Detection & Incident Response
  • Oversee threat detection, triage, investigation, and response activities across the enterprise.
  • Develop and refine incident response playbooks, ensuring rapid and effective response to security events.
  • Lead incident response efforts for significant security events, coordinating cross‑functional teams and executive communications.
• Cloud Security Operations
  • Manage security operations for our multi‑cloud environment (Azure, AWS), including cloud security posture management using tools such as Upwind.
  • Partner with Infrastructure and Dev Ops teams to ensure secure configuration and monitoring of cloud workloads and SaaS application infrastructure.
  • Collaborate with development teams to integrate security monitoring into CI/CD pipelines and support secure SDLC practices.
• Corporate Infrastructure Security & Hardening
  • Lead the hardening of Litera’s corporate infrastructure through the development and enforcement of security policies across identity, devices, and data.
  • Own and manage conditional access policies and identity management strategies using Microsoft Entra , ensuring least‑privilege access and strong authentication controls.
  • Develop and maintain device configuration and endpoint hardening policies across the corporate fleet using Microsoft Intune.
  • Oversee email security initiatives including mail filtering policies via Microsoft Defender for Office 365, anti‑phishing controls, and user phishing simulation programs (Attack Simulation Training) to drive security awareness.
  • Lead data protection efforts, including data classification…