LexisNexis
Consulting/Principal Security Engineer
About This Role
About LexisNexis
LexisNexis is a global data analytics and legal AI company based in New York, New York. It provides a wide range of solutions, including legal research, news, business information, and risk management services. Utilizing advanced technologies like machine learning and natural language processing, LexisNexis serves customers in over 150 countries with a workforce of approximately 11,800 employees. Founded in 1966, LexisNexis pioneered the first commercial full-text legal information service with its Lexis platform, significantly improving the efficiency of legal research. The company also offers the Nexis service, which provides access to news, financial data, and market research. Its products have transitioned to web-based platforms, enhancing professional workflows across legal, regulatory, and business sectors. LexisNexis is committed to advancing the rule of law globally through partnerships with various stakeholders, including governments, legal professionals, and NGOs.
Security at LexisNexis
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“LexisNexis's AppSec philosophy centers on enhancing data protection to uphold availability, confidentiality, and integrity. Their mission includes a commitment to not using customer data for model training. The risk philosophy is described as a 'risk-balanced approach' to the development and implementation of security policies within a large multi-national context. There is no public information regarding their specific stance on developer enablement versus gatekeeping.”
Security Team
The AppSec team at LexisNexis is integrated within the broader technology and operations scope. Security, along with software development and R&D, reports through the CTO/Technology leadership. A key public-facing leader is Matt McKeever, CTO of Infrastructure and Operations, who emphasizes a 'risk-balanced approach' to security policies. While specific team size and consolidated AppSec job counts are not publicly available, individual professional profiles indicate the use of Dynamic Application Security Testing (DAST) within the engineering workflow.
Key Initiatives
LexisNexis mandates that software development follows industry-standard secure practices, such as OWASP, and specifically requires mobile application development to follow a secure software assessment methodology. Recent initiatives include the publication of updated compliance reports, such as SOC2 Type 2, via their Trust Center. There is no public evidence of a Security Champions program or specific 'Shift Left' practices in the CI/CD pipeline. Vulnerability management intake includes secure software assessment requirements, though specific remediation SLAs are not publicly disclosed.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on LinkedIn