Job Opportunities API

The Role You'll help protect Everlaw's most valuable asset—our customer data—by leading technical security initiatives and making secure choices default and effortless across our entire platform. Reporting to the Director, Security Engineering, you will scale our secure software development lifecycle (SSDLC), harden our cloud infrastructure, and act as a trusted technical advisor to engineering teams as we process and store highly sensitive evidence for high-profile litigation and investigations. This is a full-time, exempt position based in our Oakland, CA office with a hybrid work schedule: in office M/W/Th with the option to work from home on Tu/Fr. What you'll do Lead a team of security engineers to build and integrate tools that ensure a scalable and efficient secure software development lifecycle (SSDLC) while developing the technical skills of other team members. Conduct threat modeling sessions, security design reviews, and code and configuration reviews to advise engineers on building resilient systems. Expand and harden our AWS environment across areas such as IAM, AWS Security Hub, Amazon GuardDuty, AWS Config, Service Control Policies, and AWS Firewall Manager. Partner with Engineering, Engineering Operations, IT, and GRC teams to probe for vulnerabilities, assess technical risk, and guide response strategies. Triage security events and manage incident response to contain threats, recover normal operations, and prevent recurrence. Develop and refine operational security processes, procedures, and runbooks to support Everlaw’s rapid growth. About You You have at least 4 years of professional experience working in dedicated security engineering roles. You possess strong programming and automation skills in at least one scripting language (such as Python). You have a keen analytical eye for identifying software and cloud infrastructure vulnerabilities and a drive to resolve them. You communicate technical security concepts clearly without jargon and partner collaboratively to solve problems without blocking development velocity. You understand effective operational security processes and how to design practical safeguards for distributed systems. You are authorized to work in the United States without restrictions. Please note that at this time, Everlaw is not sponsoring F-1 visas, including OPT, for this role. Bonus points Experience securing SaaS platforms, distributed systems, or large-scale data architecture. Software development proficiency in a compiled language (such as Java). Hands-on experience with AWS infrastructure and modern DevOps and automation tools (e.g., Terraform, Ansible, Git). Think you're missing some of the skills and are hesitant to apply? We do not believe in the 'perfect' candidate and encourage you to apply if you feel you can bring value to our team. We often revisit candidates who may have applied for a different role if something comes up that's a better fit. The Team — Security Engineering The Security Engineering team helps make Everlaw secure by default, strengthening the platform systems and practices that protect customers and their most sensitive data. Across application and cloud security, monitoring, automation, incident response, and compliance engineering, the team identifies risks early and builds durable protections. This work makes secure choices easier, allowing Everlaw to keep innovating without compromising the trust at the heart of the product. Total Rewards & Benefits The expected salary range for this role is $215,000 - $272,000. Final salary depends on factors including the candidate's experience and skills, and the base pay range is subject to change. This role is also eligible for equity and the benefits below. Health & well-being Comprehensive medical, dental, and vision coverage Flexible Spending Accounts for heal