IT Security Engineer

IT Security Engineer

Edinburgh

Wordsmith

Wordsmith is building the legal operations platform for in-house teams, and we're growing fast.

We believe in-house legal is becoming one of the most important functions in the AI era. Every business is moving faster, but legal work is still too often scattered across inboxes, chats, documents and disconnected systems.

Wordsmith brings that work into one system. Requests come in from across the business, AI agents handle the routine, lawyers stay in control where judgment matters, and every step is captured as work happens.

We're built for in-house legal, not law firms. Our goal is to help legal teams move faster, reduce unnecessary external counsel spend, and become a function the business can run with.

More than 500 companies, including Financial Times, Safelite, Trip.com, Canva, Starling and Sage, use Wordsmith. Backed by $100M from Index Ventures, General Catalyst, Highland Europe and others, we're building one of the defining companies in legal AI.

Why this role is different

We treat internal IT as a product and our employees as its users, not as tickets. If your answer to a repeated problem is to do it faster by hand, this isn't the seat — and it isn't a back-room coding role either.

You'll be the engineer who builds the platform that provisions, supports and secures every Wordsmith employee, end to end. The goal is for the function to get more automated as we grow, not need more people.

The Role

You'll own onboarding, access, devices and offboarding as one connected system, and build the tooling — including coding agent workflows — that removes the manual steps at every stage. You'll be hands-on with the physical side of the job too, in the Edinburgh office.

What you'll do

• Build a joiner pipeline that reads a new hire from Humaans, creates their identity in Okta, assigns app access by group rule, and triggers zero-touch laptop enrolment in Jamf — no manual steps

• Build a Slack assistant, backed by a coding agent, that handles requests like “I need access to X” or “my laptop is slow” and either fixes them or routes them, resolving most without a human

• Build a hardware vending machine for the Edinburgh office that dispenses chargers, dongles, headsets and loan laptops against an employee's identity, with stock reordered automatically

• Write scripts and infrastructure as code that configure devices, enforce security baselines, and produce compliance evidence on their own

• Build an offboarding flow that revokes access everywhere, wipes and reclaims the device, and files the record the moment someone is marked as a leaver