Security Engineer (Security Operations)

Everlaw • Oakland, CA

1d • Hybrid

About The Position

Everlaw is seeking a Security Engineer to join their technical security operations team. Security is a strategic pillar at Everlaw, and this role is crucial for protecting customer data. The company emphasizes the importance of dedication and care in safeguarding sensitive information, noting that high-profile cases are managed on the Everlaw Platform. The role requires a passion for learning new technologies to ensure data security across various systems, including web applications, data warehouses, and machine learning algorithms. Security Engineering collaborates with various teams to build and operate a secure platform that meets customer and company security and compliance requirements. They aim to understand user needs and protect the confidentiality, integrity, and availability of information. Everlaw's mission is to promote justice by illuminating truth, and their culture is open and vibrant, with a commitment to professional growth, offering an annual learning and development stipend and regular career check-ins. They encourage applications even if candidates don't meet every single qualification, believing in the value of diverse skills and experiences.

Requirements

• At least 1-3 years of experience working in a security-focused role.
• Experience in handling security events and incidents from initial triage through to remediation.
• Programming skills in at least one scripting language (like Python) and comfortable navigating a Linux environment.
• Experience with security tools like vulnerability scanners (Nessus/Trivy), HIDS/NIDS (Wazuh/Zeek), and SIEM/SOAR platforms (Splunk/ELK/Datadog).
• Understanding of the vulnerability lifecycle and experience detecting, prioritizing, and remediating vulnerabilities.
• Experience writing detection rules and response processes for security-specific events.
• Ability to explain technical concepts without jargon, keeping security relatable.
• Ability to balance strong protections with enabling people to do their work, finding ways to improve security without blocking innovation.
• Authorized to work in the United States without restrictions.

Nice To Haves

• Previous experience with SaaS environments and distributed systems.
• Programming skills in at least one compiled language (like Java).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

Responsibilities

• Support the team to drive improvements in our vulnerability management, threat detection, and incident response capabilities, contributing your perspective to help the team grow.
• Triage security events and respond to security incidents, taking action to contain them, guiding recovery of normal operations, and reducing the likelihood of recurring threats.
• Strengthen threat detection and response systems that safeguard both our cloud infrastructure, third-party integrations, and platform services.
• Develop and refine security processes, procedures, and runbooks that allow our security posture to scale as the company grows.
• Manage and tune AWS security services (IAM, Security Hub, GuardDuty, Config) for effective threat detection, access control, and continuous monitoring.
• Collaborate with Engineering, Engineering Operations, Corporate Security, and GRCT teams to help meet our operational security commitments by probing for vulnerabilities, assessing risk, and advising on how to respond to them.
• Advise other engineers and partners on building a secure platform by leading threat modeling sessions, conducting security design reviews, and reviewing code and configuration changes for security concerns.
• Proactively solve security challenges and foster a security mindset with innovative, security-conscious coworkers across Everlaw.

Benefits

• The expected salary range for this role is between $159,000 - $201,000.
• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision
• Flexible Spending Accounts for health and dependent care expenses
• Paid parental leave
• Approximately 10 days (80 hours) per year of sick leave
• Seventeen paid vacation days plus 11 federal holidays
• Membership to Modern Health to help employees prioritize mental health and wellness
• Annual allocation for Learning & Development opportunities and applicable professional membership dues
• Company-sponsored life and disability insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed