Senior Security Engineer

Everlaw is looking for a Senior Security Engineer. Reporting to the Director of Security Engineering, you will be a leading member of the technical security team, helping to protect our customers' sensitive data and supporting our secure platform across architecture and operations.

• Lead a team of security engineers to build and integrate tools to ensure a scalable and efficient secure software development lifecycle (SSDLC).
• Guide and develop the skills of other security engineers.
• Advise other engineers on building a secure platform.
• Lead threat modeling sessions, conduct security design reviews, and review code and configuration changes for security concerns.
• Build out security improvements on our AWS accounts covering authentication, authorization, threat detection, encryption, and reduction of attack surface (IAM, AWS Security Hub, Amazon Guard Duty, AWS Config, Service Control Policies, AWS Firewall Manager, etc.).
• Collaborate with Engineering, Engineering Operations, IT, and GRC teams to probe vulnerabilities, assess risk, and advise on response.
• Triage security events and respond to incidents, including containment and recovery.
• Develop new security processes, procedures, runbooks, and refine existing ones to scale with rapid growth.
• Find creative solutions without blocking innovation.
• Promote a security mindset and think like an attacker across the company.

• At least 4 years of experience in security.
• Programming skills in at least one scripting language (e.g., Python).
• Strong problem spotting and exploitation/defense abilities, with a commitment to fixing issues.
• Excellent collaboration and communication skills, able to explain technical concepts without jargon.
• Ability to help others solve security problems and improve security without blocking work.
• Understanding of effective security processes and balancing security with usability.
• Authorized to work in the United States without restrictions.

• Experience with SaaS environments and distributed systems.
• Programming skills in a compiled language (e.g., Java).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

• Salaries: $215,000 - $272,000 (range subject to change)
• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision coverage
• Flexible Spending Accounts for health and dependent care
• Paid parental leave
• ~10 days sick leave per year
• 17 paid vacation days plus 11 federal holidays
• Membership to Modern Health for mental health & wellness
• Annual Learning & Development stipend and professional membership dues
• Company-sponsored life and disability insurance

Everlaw is an equal opportunity employer. We pride ourselves on having a diverse workforce and we do not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We respect the gender, gender identity and gender expression of our applicants and employees, and we honor requests for pronouns.

It is our policy to comply with all applicable national, state and local laws pertaining to nondiscrimination and equal opportunity, including the California Equal Pay Act. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. We collect and process the personal information you provided along with your job application in accordance with our Applicants Privacy Notice and Notice at Collection.