Senior Security Engineer

Menlo Ventures; Oakland (CA); On-site; USD 215,000 - 272,000; Full time

Benefits offered by this job

Equity program

401(k) with company matching

Health, dental, and vision coverage

Paid parental leave

17 paid vacation days plus 11 federal holidays

Job summary

Everlaw, based in California, is searching for a Senior Security Engineer to lead their technical security team. This critical role involves protecting sensitive customer data while supporting a secure platform across architecture and operations.

The ideal candidate will bring at least 4 years of security experience and strong leadership abilities. The position offers a competitive salary ranging from $215,000 to $272,000, alongside various benefits such as equity, health coverage, a 401(k) retirement plan, and paid parental leave.

Qualifications

• At least 4 years of experience in security.
• Strong problem spotting and exploitation/defense abilities.
• Ability to communicate technical concepts clearly.

Responsibilities

• Lead a team of security engineers.
• Conduct security design reviews and threat modeling sessions.
• Triage security events and respond to incidents.

Skills

Security experience

Scripting skills (e.g., Python)

Collaboration skills

Problem-solving

Knowledge of security processes

Tools

AWS

Terraform

Ansible

Git

Job description

Everlaw is looking for a Senior Security Engineer. Reporting to the Director of Security Engineering, you will be a leading member of the technical security team, helping to protect our customers' sensitive data and supporting our secure platform across architecture and operations.

Responsibilities

• Lead a team of security engineers to build and integrate tools to ensure a scalable and efficient secure software development lifecycle (SSDLC).
• Guide and develop the skills of other security engineers.
• Advise other engineers on building a secure platform.
• Lead threat modeling sessions, conduct security design reviews, and review code and configuration changes for security concerns.
• Build out security improvements on our AWS accounts covering authentication, authorization, threat detection, encryption, and reduction of attack surface (IAM, AWS Security Hub, Amazon GuardDuty, AWS Config, Service Control Policies, AWS Firewall Manager, etc.).
• Collaborate with Engineering, Engineering Operations, IT, and GRC teams to probe vulnerabilities, assess risk, and advise on response.
• Triage security events and respond to incidents, including containment and recovery.
• Develop new security processes, procedures, runbooks, and refine existing ones to scale with rapid growth.
• Find creative solutions without blocking innovation.
• Promote a security mindset and think like an attacker across the company.

Qualifications

• At least 4 years of experience in security.
• Programming skills in at least one scripting language (e.g., Python).
• Strong problem spotting and exploitation/defense abilities, with a commitment to fixing issues.
• Excellent collaboration and communication skills, able to explain technical concepts without jargon.
• Ability to help others solve security problems and improve security without blocking work.
• Understanding of effective security processes and balancing security with usability.
• Authorized to work in the United States without restrictions.

Preferred Qualifications (Pluses)

• Experience with SaaS environments and distributed systems.
• Programming skills in a compiled language (e.g., Java).
• Experience with AWS, Terraform, Ansible, git, and other infrastructure, development, and operations tools.

Benefits

• Salaries: $215,000 - $272,000 (range subject to change)
• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision coverage
• Flexible Spending Accounts for health and dependent care
• Paid parental leave
• ~10 days sick leave per year
• 17 paid vacation days plus 11 federal holidays
• Membership to Modern Health for mental health & wellness
• Annual Learning & Development stipend and professional membership dues
• Company-sponsored life and disability insurance

Equal Opportunity Employer

Everlaw is an equal opportunity employer. We pride ourselves on having a diverse workforce and we do not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We respect the gender, gender identity and gender expression of our applicants and employees, and we honor requests for pronouns. It is our policy to comply with all applicable national, state and local laws pertaining to nondiscrimination and equal opportunity, including the California Equal Pay Act. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. We collect and process the personal information you provided along with your job application in accordance with our Applicants Privacy Notice and Notice at Collection.