Senior Full-Stack AI & Security Engineer

Dragonfli Group•New York, NY

21h•Hybrid

About The Position

Dragonfli Group is seeking a Senior Full-Stack Engineer to serve as a dedicated managed resource on a long-term client engagement with a leading legal technology company operating at the intersection of AI and enterprise data trust. This role is a crucial member of the software engineer team and is embedded directly into the client’s product and operations team. The position spans full-stack product development, AI and LLM pipeline engineering, IT operations, and security-integrated development. You will operate under dual reporting: Dragonfli’s vCISO for security governance and the client’s operations lead for business and product priorities. This is not a staff augmentation seat. You will own workstreams, make technical decisions, and be accountable for delivery. To qualify for this role, you must have a minimum of 5+ years of professional software engineering experience. Location and Work Arrangement This is a hybrid role based in New York, NY. Client operates out of a location in New York. The expectation is regular on-site presence aligned with the client’s hybrid schedule. Candidates based elsewhere on the U.S. East Coast will be considered, with the understanding that periodic in-person presence in New York will be required.

Requirements

5+ years of professional software engineering experience
Strong proficiency in TypeScript, React, and NextJS
Production experience with Node.js backend development
Demonstrated PostgreSQL expertise, including query optimization and schema design
Hands-on experience building and maintaining production LLM integrations (not theoretical or hobbyist)
Experience with event-driven architecture and background job frameworks (Inngest, Temporal, Bull, or equivalent)
Working knowledge of CI/CD pipelines (GitHub Actions, Vercel, or similar)
Comfort operating across the full stack, from database to deployment
Strong written communication skills; ability to document decisions and participate in asynchronous collaboration

Nice To Haves

Experience in legal technology, compliance-driven environments, or enterprise SaaS
Familiarity with SOC 2 compliance requirements and how they apply to development practices
Experience with identity platforms (WorkOS, Auth0, or equivalent)
Experience with high-performance frontend rendering (virtualized lists, large dataset visualization)
Familiarity with Google Workspace administration and macOS endpoint management
Experience with ElysiaJs, tRPC, or similar type-safe API frameworks
Master’s degree in Computer Science or related field

Responsibilities

Build and maintain user-facing features on client’s React, NextJS, and TypeScript frontend
Implement high-performance data visualization components capable of rendering thousands of UI elements using virtualized rendering techniques
Develop and maintain Node.js backend services, including API development, business logic, and data layer integration
Own PostgreSQL database management, including query optimization for performance-critical operations, schema management, and data integrity
Maintain and extend Inngest-powered background job infrastructure processing legal technology workloads
Build new event-driven background pipelines as product requirements evolve; monitor job execution for reliability and performance
Participate in sprint planning, code reviews, and feature delivery while adhering to secure coding standards
Continue development of client’s multi-step LLM pipelines, including AI judging workflows and real-time AI chat features
Design and iterate on prompt architectures for production AI features
Manage model response evaluation logic across multiple commercial LLM platforms (OpenAI, Anthropic, Gemini)
Implement streaming and real-time AI interactions within the application
Ensure all data exchange with external AI services is architected securely with appropriate access controls, logging, and data handling safeguards
Administer Google Workspace and WorkOS, including employee onboarding, offboarding, role-based access provisioning, and periodic access reviews
Manage client’s predominantly macOS and BYOD environment, including baseline security configurations and endpoint protection
Serve as liaison with WeWork and local providers for infrastructure-related needs
Own GitHub dependency patching and remediation of security findings identified through Vanta and the Vercel deployment pipeline
Prioritize vulnerability remediation based on severity, exploitability, and client-facing impact
Maintain and harden the GitHub-to-Vercel CI/CD pipeline, including branch protection policies, automated security scanning, and deployment access controls
Operate within the security governance framework established by Dragonfli’s vCISO