About Legit
Legit is the AI-native ASPM platform purpose-built to secure AI-powered development - AI-first pipelines, code assistants, agents, and vibe coding - giving security teams visibility across the SDLC and from code to cloud. Named a 2026 Leader in ASPM and an AI Code Innovator, we're scaling fast. Our Solution Success team is where technical depth meets business impact.
About the Role
A senior technical seat for someone who owns outcomes, not tickets. You'll architect solutions in pre-sales, then drive adoption and value in post-sales - the person AEs want in the room for their hardest deals and customers call when the stakes are high. We're hiring a top performer who can go deep with a security architect one hour and stay credible with a CISO the next, and who turns technical wins into commercial ones. If you thrive with autonomy and a high bar, keep reading.
What You'll Do
Pre-Sales
• Partner with AEs to design and present tailored solutions; serve as the technical authority across security, DevOps, engineering, and executive stakeholders.
• Lead high-impact demos, workshops, and proofs-of-value showing how Legit secures AI-driven development across CI/CD, SCM, and cloud.
• Translate ambiguous, complex requirements into clear architectural blueprints tied to security outcomes.
Post-Sales
• Own onboarding and technical enablement to drive rapid time-to-value; act as senior escalation point on secure supply chain and AI-SDLC best practices.
• Drive adoption, expansion, and retention - surfacing and helping close upsell and deeper-integration opportunities.
• Run Executive Business Reviews framing ROI and risk reduction; advocate for customers with Product to shape the roadmap; build the team's playbooks and architecture guides.
RequirementsWhat You Bring
We expect most of the following, not a subset:
• 6+ years in AppSec, DevSecOps, or software architecture, with 3+ years customer-facing (SA, SE, TAM, or equivalent). Enterprise / regulated-industry experience strongly preferred.
• Hands-on command of the modern SDLC - SCM, CI/CD, cloud pipelines - fluent across GitHub, GitLab, Jenkins, Azure DevOps. You've built and broken these pipelines.
• Genuine cybersecurity depth in AppSec/ASPM or the adjacent scanning stack (SAST, SCA, secrets, IaC, pipeline security) - able to hold your own with a principal security engineer.
• A proven pre-sales AND post-sales track record: won competitive technical evaluations, then drove those accounts to adoption, renewal, and expansion.
• Hands-on with AI-driven security tooling and LLM-based workflows; can guide customers on adopting, governing, and securing AI across their SDLC.
• Executive-grade communication - equally clear with engineers and the boardroom, comfortable leading demos, workshops, and EBRs. A self-starter who sets the bar with high autonomy.
Bonus Points
• ASPM or DevSecOps platform background · enterprise SaaS solution design in regulated industries (finance, insurance, critical infrastructure) · working knowledge of emerging AI risks (model misuse, data leakage, poisoning) and enterprise mitigations.
Skills Required
- 6+ years in AppSec, DevSecOps, or software architecture, with 3+ years customer-facing (SA, SE, TAM, or equivalent).
- Enterprise / regulated-industry experience (finance, insurance, critical infrastructure).
- Hands-on command of the modern SDLC: SCM, CI/CD, cloud pipelines; fluent across GitHub, GitLab, Jenkins, Azure DevOps.
- Deep cybersecurity knowledge in AppSec/ASPM or adjacent scanning stack (SAST, SCA, secrets, IaC, pipeline security).
- Proven track record in both pre-sales and post-sales: winning technical evaluations and driving adoption, renewal, expansion.
- Hands-on experience with AI-driven security tooling and LLM-based workflows; guiding adoption and governance.
- Executive-grade communication; comfortable with demos, workshops, Executive Business Reviews; self-starter with high autonomy.
- ASPM or DevSecOps platform background.
- Enterprise SaaS solution design experience in regulated industries.
- Working knowledge of emerging AI risks (model misuse, data leakage, poisoning) and enterprise mitigations.
What We Do
Legit Security is the AppSec platform purpose-built to secure AI-powered development. Legit VibeGuard provides complete visibility and security for AI code and development processes. Legit ASPM extends that protection across your entire SDLC – unifying AppSec testing, secrets prevention, software supply chain security and vulnerability management in a unified control plane.
