Security Engineer (Security Operations)

Everlaw is looking for a Security Engineer to join their technical security operations team. The role involves supporting improvements in vulnerability management, threat detection, and incident response, while collaborating with various teams to enhance security processes and protect customer data.

Responsibilities

• Support the team to drive improvements in our vulnerability management, threat detection, and incident response capabilities, contributing your perspective to help the team grow
• Triage security events and respond to security incidents, taking action to contain them, guiding recovery of normal operations, and reducing the likelihood of recurring threats
• Strengthen threat detection and response systems that safeguard both our cloud infrastructure, third-party integrations, and platform services
• Develop and refine security processes, procedures, and runbooks that allow our security posture to scale as the company grows
• Manage and tune AWS security services (IAM, Security Hub, GuardDuty, Config) for effective threat detection, access control, and continuous monitoring
• Collaborate with Engineering, Engineering Operations, Corporate Security, and GRCT teams to help meet our operational security commitments by probing for vulnerabilities, assessing risk, and advising on how to respond to them
• Advise other engineers and partners on building a secure platform by leading threat modeling sessions, conducting security design reviews, and reviewing code and configuration changes for security concerns
• Proactively solve security challenges and foster a security mindset with innovative, security-conscious coworkers across Everlaw

Skills

• You have at least 1-3 years of experience working in a security-focused role
• You have experience in handling security events and incidents from initial triage through to remediation
• You have programming skills in at least one scripting language (like Python) and are comfortable navigating a Linux environment
• You have experience with security tools like vulnerability scanners (Nessus/Trivy), HIDS/NIDS (Wazuh/Zeek), and SIEM/SOAR platforms (Splunk/ELK/Datadog)
• You understand the vulnerability lifecycle and have experience detecting, prioritizing, and remediating vulnerabilities
• You have written detection rules and response processes for security specific events
• You can explain technical concepts without jargon, keeping security relatable so that others can solve problems with your support
• You balance strong protections with enabling people to do their work, finding ways to improve security without blocking innovation
• You are authorized to work in the United States without restrictions. Please note that at this time, Everlaw is not sponsoring employment visas for this role
• You have previous experience with SaaS environments and distributed systems
• You have programming skills in at least one compiled language (like Java)
• You have experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools

Benefits

• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision
• Flexible Spending Accounts for health and dependent care expenses
• Paid parental leave and approximately 10 days (80 hours) per year of sick leave
• Seventeen paid vacation days plus 11 federal holidays
• Membership to[Modern Health](https://www.joinmodernhealth.com/) to help employees prioritize mental health and wellness
• Annual allocation for Learning & Development opportunities and applicable professional membership dues
• Company-sponsored life and disability insurance
• Work in Downtown Oakland, just steps from the BART line and dozens of restaurants
• You will get a powerful Linux laptop and be able to customize your desk setup
• Bond over team lunches and out-of-the-box events
• Ranked “[#1 on G2 for Ediscovery Software and Momentum](https://www.everlaw.com/blog/legal-technology/everlaw-ranks-1-g2-ediscovery-software-reports/)” and we offer free eDiscovery resources to benefit the greater societal good with [Everlaw for Good](https://www.everlaw.com/everlaw-for-good/)
• Time off for company-sponsored volunteer events and 4 paid hours per quarter to volunteer at a charitable organization of your choice
• Take advantage of learning and career development opportunities
• Ranked #9 on Glassdoor's Best Places to Work 2023 for US small and medium companies
• One of [Wealthfront’s 2021 Career Launching Companies](https://blog.wealthfront.com/career-launching-companies-list/#companies-list), and ranked #2 on the “[2022 Bay Area Best Places to Work](https://www.everlaw.com/blog/2022/05/05/2022-bay-area-best-places-to-work/)” list by the San Francisco Business Times and the Silicon Valley Business Journal
• One of [Fast Company’s World's Most Innovative Companies for 2022](https://www.prnewswire.com/news-releases/everlaw-named-to-fast-companys-50-most-innovative-companies-for-2022-301497930.html) and proud contributor of free ediscovery resources to benefit the greater good through [“Everlaw for Good”](https://www.everlaw.com/everlaw-for-good/)
• Annual learning and development stipend
• Regular check-ins with managers regarding career goals

Company Overview