Security Engineer (Security Operations)
About The Position
Everlaw is looking for a Security Engineer to join their technical security operations team. Security is a strategic pillar at Everlaw, focused on protecting customer data. The role involves tackling complex challenges in litigation technology, where data is spread across distributed systems and varied databases. Protecting user data requires continuous learning and adaptation to new technologies, whether data flows through a web application, is stored in a data warehouse, or is used for machine learning. Security Engineering supports Everlaw teams in creating and operating a secure platform that meets customer and company security and compliance requirements. The company culture is open and vibrant, with a commitment to professional growth, offering an annual learning and development stipend and regular career check-ins. They encourage applications even if candidates don't meet every single qualification, valuing potential contributions. This is a full-time, exempt position located onsite in Oakland, California, requiring 3 days per week in the office. The onboarding process is designed to integrate new hires quickly with informative sessions on the product, policies, processes, and team structure. The company trusts new hires to bring valuable experience and knowledge to uplift the team, without expecting them to know everything on day one.
Requirements
- At least 1-3 years of experience working in a security-focused role.
- Experience in handling security events and incidents from initial triage through to remediation.
- Programming skills in at least one scripting language (like Python) and comfortable navigating a Linux environment.
- Experience with security tools like vulnerability scanners (Nessus/Trivy), HIDS/NIDS (Wazuh/Zeek), and SIEM/SOAR platforms (Splunk/ELK/Datadog).
- Understanding of the vulnerability lifecycle and experience detecting, prioritizing, and remediating vulnerabilities.
- Experience writing detection rules and response processes for security-specific events.
- Ability to explain technical concepts without jargon, keeping security relatable.
- Ability to balance strong protections with enabling people to do their work, finding ways to improve security without blocking innovation.
- Authorized to work in the United States without restrictions.
Nice To Haves
- Previous experience with SaaS environments and distributed systems.
- Programming skills in at least one compiled language (like Java).
- Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.
Responsibilities
- Support the team to drive improvements in our vulnerability management, threat detection, and incident response capabilities, contributing your perspective to help the team grow.
- Triage security events and respond to security incidents, taking action to contain them, guiding recovery of normal operations, and reducing the likelihood of recurring threats.
- Strengthen threat detection and response systems that safeguard both our cloud infrastructure, third-party integrations, and platform services.
- Develop and refine security processes, procedures, and runbooks that allow our security posture to scale as the company grows.
- Manage and tune AWS security services (IAM, Security Hub, GuardDuty, Config) for effective threat detection, access control, and continuous monitoring.
- Collaborate with Engineering, Engineering Operations, Corporate Security, and GRCT teams to help meet our operational security commitments by probing for vulnerabilities, assessing risk, and advising on how to respond to them.
- Advise other engineers and partners on building a secure platform by leading threat modeling sessions, conducting security design reviews, and reviewing code and configuration changes for security concerns.
- Proactively solve security challenges and foster a security mindset with innovative, security-conscious coworkers across Everlaw.
Benefits
- Equity program
- 401(k) retirement plan with company matching
- Health, dental, and vision
- Flexible Spending Accounts for health and dependent care expenses
- Paid parental leave
- Approximately 10 days (80 hours) per year of sick leave
- Seventeen paid vacation days
- 11 federal holidays
- Membership to Modern Health to help employees prioritize mental health and wellness
- Annual allocation for Learning & Development opportunities and applicable professional membership dues
- Company-sponsored life and disability insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
