Senior Security Engineer

Responsibilities

• Lead the development and integration of tools to ensure a scalable and efficient secure software development lifecycle (SSDLC)
• Advise engineering teams on building secure platforms through threat modeling, security design reviews, and code reviews
• Build and improve security controls on AWS, including IAM, threat detection, encryption, and attack surface reduction
• Collaborate with Engineering, IT, and GRC teams to probe for vulnerabilities and assess operational security risks
• Triage security events and lead incident response efforts to contain threats and minimize recurrence
• Develop and refine security processes, procedures, and runbooks to support company growth

Requirements

• 4+ years of professional experience working in security
• Proficiency in at least one scripting language, such as Python
• Experience with threat modeling and security design reviews
• Hands-on experience with AWS security services and cloud infrastructure
• Strong ability to collaborate across teams and explain technical security concepts without jargon
• Authorization to work in the United States without restrictions

Preferred Qualifications

• Previous experience in SaaS environments and managing distributed systems
• Programming skills in a compiled language like Java
• Experience with infrastructure and operations tools such as Terraform, Ansible, and git

Benefits

• Competitive salary range of $215,000 - $272,000
• Equity program and 401(k) retirement plan with company matching
• Comprehensive health, dental, and vision insurance
• Paid parental leave and significant paid time off (vacation and sick leave)
• Annual learning and development stipend
• Mental health and wellness support through Modern Health

About the Company

Everlaw helps law firms, government agencies, and corporations manage massive amounts of evidence in complex legal investigations. We combine cutting-edge technology with elegant design to help our users illuminate the truth. Our platform is used in some of the world's most high-profile legal cases, making data security and integrity our highest priority.