Senior Security Engineer

Everlaw • Oakland, CA

7d • Onsite

About The Position

Everlaw is looking for a Senior Security Engineer. Reporting to the Director, Security Engineering, you will be a leading member of the technical security team at the company. Security is one of the main strategic pillars at Everlaw, and we are looking for someone to help us execute on that strategy and protect our most valuable asset--our customer data. Everlaw's customers entrust us with some of their most sensitive information, and it takes dedication and care to protect it. Some of the world's most high-profile cases are managed using the Everlaw Platform. We set a high bar to do what's right by our users. Tackling litigation with technology presents deep challenges. Data is spread across distributed systems, stored in varied databases, housed at different physical locations. Keeping our users' data safe requires a passion for learning new technologies because we have to be good custodians no matter whether data flows through a Web application, gets stored in a data warehouse, or is used to train the latest machine learning algorithms. We are dedicated to continuously learning and improving our processes to achieve our mission. Security Engineering supports teams across Everlaw in creating and operating a secure platform that meets the security and compliance requirements of our customers and company. We collaborate, build, and use technology to make it easy to do the right thing. We seek to understand people's needs and strive to protect confidentiality, integrity, and availability of information. At Everlaw, our mission is to promote justice by illuminating truth. Our company culture is open and vibrant and we’re committed to the professional growth of our team members, offering an annual learning and development stipend and regular check-ins with managers regarding career goals. If you’re looking for a place that values passion, integrity, thinking big, and a desire to learn, we’d love to hear from you! Think you’re missing some of the skills and are hesitant to apply? We do not believe in the ‘perfect’ candidate and encourage you to apply if you feel you can bring value to our team. This is a full-time, exempt position located onsite in Oakland, California. Getting started We want you to feel like part of the team early on! Our onboarding process will integrate you into the company with informative sessions on our product, policies, processes, and team structure and goals. We’re excited for you to learn, grow, and contribute right away! We trust that you’ll bring experience and knowledge that will uplift and uplevel the team, but we don’t expect you to know everything on Day 1.

Requirements

• An interest in security and want to develop your security knowledge, skills, and abilities.
• At least 4 years of experience working in security.
• Programming skills in at least one scripting language (like Python).
• A keen eye for spotting problems and figuring out how to exploit them or defend against them, and don't like to let them go unfixed.
• Able to collaborate effectively with coworkers on different teams.
• Can explain technical concepts without jargon, and keep security relatable.
• Willing to find creative ways to improve security without blocking others.
• An understanding of effective security processes.
• Authorized to work in the United States without restrictions.
• Not sponsoring F-1 visas, including OPT, for this role.

Nice To Haves

• Previous experience with SaaS environments and distributed systems.
• Programming skills in at least one compiled language (like Java).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

Responsibilities

• Lead a team of security engineers to build and integrate tools to ensure a scalable and efficient secure software development lifecycle (SSDLC).
• Draw upon your experience to guide and develop the skills of other security engineers.
• Advise other engineers on building a secure platform.
• Lead threat modeling sessions, conduct security design reviews, and review code and configuration changes for security concerns.
• Build out security improvements on our AWS accounts, covering areas like authentication, authorization, threat detection, encryption, and reducing attack surface.
• Collaborate with Engineering, Engineering Operations, IT, and GRC teams to help meet our operational security commitments by probing for vulnerabilities, assessing the risk, and advising on how to respond to them.
• Triage security events and respond to security incidents, first taking action to contain them and later guiding us to recover normal operations and minimize the chances of recurring threats.
• Develop new security processes, procedures, runbooks, and refine existing ones, to help Everlaw scale with its rapid growth.
• Find creative ways to solve problems without saying no to innovation.

Benefits

• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision
• Flexible Spending Accounts for health and dependent care expenses
• Paid parental leave
• Approximately 10 days (80 hours) per year of sick leave
• Seventeen paid vacation days
• 11 federal holidays
• Membership to Modern Health to help employees prioritize mental health and wellness
• Annual allocation for Learning & Development opportunities and applicable professional membership dues
• Company-sponsored life and disability insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed