Job Opportunities API

The Role You will help safeguard the data entrusted to Everlaw by high-profile legal teams, driving improvements across our vulnerability management, threat detection, and incident response capabilities. Working within our technical security operations team, you'll tackle the complex challenges of securing massive volumes of distributed data across web applications, cloud infrastructure, and data warehouses so our platform remains secure by default. This is a full-time, exempt position based in our Oakland, CA office with a hybrid work schedule: in office M/W/Th with the option to work from home on Tu/Fr. What you'll do Triage security events and respond to security incidents, taking action to contain threats, guide recovery, and prevent recurrence. Strengthen threat detection and response systems that safeguard cloud infrastructure, third-party integrations, and platform services. Manage and tune AWS security services (IAM, Security Hub, GuardDuty, Config) for access control and continuous monitoring. Develop and refine security processes, procedures, and runbooks that scale alongside company growth. Collaborate with engineering teams to conduct threat modeling, security design reviews, and code and configuration reviews. Advise internal partners on platform security risks, explaining technical security concepts without jargon. About You You have 1–3 years of experience in a dedicated security-focused role. You have hands-on experience handling security events and incidents from initial triage through remediation. You bring programming skills in at least one scripting language (such as Python) and comfortably navigate Linux environments. You have experience working with security tools across vulnerability scanning (Nessus, Trivy), host/network detection (Wazuh, Zeek), or SIEM/SOAR platforms (Splunk, ELK, Datadog). You understand the web application security landscape (OWASP Top 10) and secure coding fundamentals. You are authorized to work in the United States. Please note that at this time, Everlaw is not sponsoring U.S. employment visas for this role. Bonus points Experience with SaaS environments, distributed systems, or compiled languages like Java. Hands-on experience with AWS, Terraform, Ansible, Git, and infrastructure-as-code workflows. Think you're missing some of the skills and are hesitant to apply? We do not believe in the 'perfect' candidate and encourage you to apply if you feel you can bring value to our team. We often revisit candidates who may have applied for a different role if something comes up that's a better fit. The Team — Security Engineering The Security Engineering team helps make Everlaw secure by default, strengthening the platform systems and practices that protect customers and their most sensitive data. Across application and cloud security, monitoring, automation, incident response, and compliance engineering, the team identifies risks early and builds durable protections. This work makes secure choices easier, allowing Everlaw to keep innovating without compromising the trust at the heart of the product. Total Rewards & Benefits The expected salary range for this role is [SALARY RANGE]. Final salary depends on factors including the candidate's experience and skills, and the base pay range is subject to change. This role is also eligible for equity and the benefits below. Health & well-being Comprehensive medical, dental, and vision coverage Flexible Spending Accounts for health and dependent care expenses Membership to Modern Health to support mental health and wellness Paid parental leave Company-sponsored life and disability insurance Financial rewards Competitive equity grants, so you share in Everlaw's long-term growth 401(k) plan with company matching of up to 4% of eligible annual compensation Growth &am