Principal Engineer

## Principal Engineer Apply remote type:
Hybrid locations:
United States of America, Eagan, Minnesota:
United States of America, Frisco, Texas:
United States of America, New York, New York:
Canada, Toronto, Ontario:
United States of America, Ann Arbor, Michigan time type:
Full time posted on:
Posted Todaytime left to apply:
End Date:
September 23, 2026 (30+ days left to apply) job requisition :
JREQ
202266
** Principal Engineer
** CoCounsel is our most advanced AI offering to date — combining generative and agentic AI capabilities to help legal professionals move beyond prompting and start delegating. As a Principal Software Engineer focused on Security & Compliance, you will set the technical direction for how CoCounsel earns and maintains the trust of law firms, corporate legal departments, and government agencies that rely on us with privileged, sensitive, and regulated data every day.

You will own the architecture and engineering practices behind our SOC 2, ISO 27001/42001, HIPAA, and FedRAMP programs, turning compliance requirements into resilient, well-instrumented systems rather than one-off audit exercises.

This role sits at the intersection of the CoCounsel Legal engineering organization and our security, privacy, and legal/compliance teams, partnering closely with platform, identity, and AI/ML engineering to deliver world-class, provably trustworthy legal AI experiences at scale.
*
* About the role:

**
* ** Own the compliance architecture:
** Understand and evolve the technical controls that satisfy the landscape of compliance; including but not limited to SOC 2 Type II, ISO 27001/42001, HIPAA, and FedRAMP (Moderate/High) requirements across CoCounsel's infrastructure, data pipelines, and AI systems. Work to understand implications of new compliance and/or certifications.  Your decisions will shape how every product line proves trust to customers and auditors.
* ** Build compliance as code:
** Look to help make the manual better, determine where point-in-time audit prep can be replaced with automated evidence collection, continuous control monitoring, and policy-as-code so that compliance state is observable and provable at any time, not just during an audit window.
* ** Engineer for real production scale and sensitivity:
** Design encryption, key management, data residency, tenant isolation, and audit logging for systems handling millions of privileged legal documents and thousands of concurrent AI interactions from professionals doing time-sensitive work.
* ** Technical leadership and cross-functional influence:
** Partner with Security, Legal, Privacy, and Product to translate regulatory and contractual requirements (customer security questionnaires, DPAs, government agency requirements) into engineering roadmaps. Mentor staff and senior engineers, raising the bar on secure-by-design development, threat modeling, and incident response across the org.
* ** Reliability and assurance:
** Establish SLOs, observability, and incident response practices for compliance-critical systems, and build the internal tooling (dashboards, alerting, control testing) that gives engineering, security, and leadership real-time confidence in our control environment.
*
* About You:

** You are a fit for the position of Principal Software Engineer, Security & Compliance if your background includes:
* Bachelor's Degree in Computer Science, Computer Engineering, a related field, or equivalent experience.
* Direct, hands-on experience building or operating production systems that achieved and maintained SOC 2 Type II, ISO 27001 (and/or 42001), and HIPAA compliance — not just reading about it in a policy document.
* Experience supporting a FedRAMP authorization process (SSP development, control implementation, 3

PAO assessments, or…