Senior Security Engineer

About the role

Security is one of the main strategic pillars at Everlaw. We are looking for a Senior Security Engineer to join our technical security team and help execute on our security strategy.

Responsibilities

• Lead a team of security engineers to build and integrate tools to ensure a scalable and efficient secure software development lifecycle (SSDLC).
• Advise other engineers on building a secure platform, leading threat modeling sessions, conducting security design reviews, and reviewing code and configuration changes for security concerns.
• Build out security improvements on our AWS accounts, covering areas like authentication, authorization, threat detection, encryption, and reducing attack surface.
• Collaborate with Engineering, Engineering Operations, IT, and GRC teams to help meet our operational security commitments by probing for vulnerabilities, assessing the risk, and advising on how to respond to them.
• Triage security events and respond to security incidents, first taking action to contain them and later guiding us to recover normal operations and minimize the chances of recurring threats.
• Develop new security processes, procedures, runbooks, and refine existing ones, to help Everlaw scale with its rapid growth.
• Find creative ways to solve problems without saying no to innovation. You'll find many thoughtful coworkers at Everlaw who are interested in making things more secure. The expertise you bring will be valued and will help others develop a security mindset and think like an attacker.

Requirements

• You have an interest in security and want to develop your security knowledge, skills, and abilities.
• You have at least 4 years of experience working in security.
• You have programming skills in at least one scripting language (like Python).
• You have a keen eye for spotting problems and figuring out how to exploit them or defend against them, and don't like to let them go unfixed.
• You're able to collaborate effectively with coworkers on different teams. You can explain technical concepts without jargon, and keep security relatable. A big part of the job is helping others across the company solve security problems.
• You are willing to find creative ways to improve security without blocking others. Security is important, but it's just as important for people to be able to do their work, and we need to find the right balance and make security easy for people.
• You have an understanding of effective security processes.
• You are authorized to work in the United States without restrictions.

Qualifications

• You have previous experience with SaaS environments and distributed systems.
• You have programming skills in at least one compiled language (like Java).
• You have experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

Skills

• Experience with SaaS environments and distributed systems.
• Programming skills in at least one scripting language (like Python).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

Benefits

• The expected salary range for this role is between $215,000 - $272,000. The final offered salary will be dependent upon many factors including the candidate’s experience and skills. The base pay range is subject to change in the future.
• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision
• Flexible Spending Accounts for health and dependent care expenses
• Paid parental leave and approximately 10 days (80 hours) per year of sick leave
• Seventeen paid vacation days plus 11 federal holidays
• Membership to Modern Health to help employees prioritize mental health and wellness
• Annual allocation for Learning & Development opportunities and applicable professional membership dues
• Company-sponsored life and disability insurance

Pay

The expected salary range for this role is between $215,000 - $272,000. The final offered salary will be dependent upon many factors including the candidate’s experience and skills. The base pay range is subject to change in the future.

Schedule

This is a full-time, exempt position located onsite in Oakland, California.