Security Engineer; Security Operations

Everlaw is looking for a Security Engineer. Reporting to the Manager, Security Engineering, you will be a member of the technical security operations team at the company. Security is one of the main strategic pillars at Everlaw, and we are looking for someone to help us execute on that strategy and protect our most valuable asset—our customer data.

Everlaw’s customers entrust us with some of their most sensitive information. Some of the world’s most high‑profile cases are managed using the Everlaw Platform, so protecting that data requires dedication and a passion for learning new technologies. Data is spread across distributed systems, stored in varied databases, and housed at different physical locations. Protecting our users’ data therefore requires continuous learning and process improvement.

Security Engineering supports teams across Everlaw in creating and operating a secure platform that meets the security and compliance requirements of our customers and company. We collaborate, build, and use technology to make it easy to do the right thing. We seek to understand people’s needs and strive to protect the confidentiality, integrity, and availability of information.

• Support the team to drive improvements in vulnerability management, threat detection, and incident response capabilities.
• Triage security events and respond to security incidents, taking action to contain them, guide recovery of normal operations, and reduce the likelihood of recurring threats.
• Strengthen threat detection and response systems that safeguard our cloud infrastructure, third‑party integrations, and platform services.
• Develop and refine security processes, procedures, and runbooks that allow our security posture to scale as the company grows.
• Manage and tune AWS security services (IAM, Security Hub, Guard Duty, Config) for effective threat detection, access control, and continuous monitoring.
• Collaborate with Engineering, Engineering Operations, Corporate Security, and GRCT teams to help meet our operational security commitments by probing for vulnerabilities, assessing risk, and advising on how to respond to them.
• Advise other engineers and partners on building a secure platform by leading threat modeling sessions, conducting security design reviews, and reviewing code and configuration changes for security concerns.
• Proactively solve security challenges and foster a security mindset with innovative, security‑conscious coworkers across Everlaw.

• You have at least 1–3 years of experience working in a security‑focused role.
• You have experience in handling security events and incidents from initial triage through remediation.
• You have programming skills in at least one scripting language (e.g., Python) and are comfortable navigating a Linux environment.
• You have experience with security tools like vulnerability scanners (Nessus, Trivy), HIDS/NIDS (Wazuh, Zeek), and SIEM/SOAR platforms (Splunk, ELK, Datadog).
• You understand the vulnerability lifecycle and have experience detecting, prioritizing, and remediating vulnerabilities.
• You have written detection rules and response processes for security‑specific events.
• You can explain technical concepts without jargon, keeping security relatable so others can solve problems with your support.
• You balance strong protections with enabling people to do their work, finding ways to improve security without blocking innovation.
• You are authorized to work in the United States without restrictions. At this time, Everlaw is not sponsoring employment visas for this role.

• Previous experience with SaaS environments and distributed systems.
• Programming skills in at least one compiled language (e.g., Java).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.
• The expected salary range for this role is between $159,000 and $201,000. The final offered salary will be dependent on experience and skills.
• Equity program.
• 401(k) retirement plan with company matching.
• Health, dental, and vision insurance.
• Flexible Spending Accounts for health and dependent care expenses.
• Paid parental leave and approximately 10 days…