Senior/Staff Security Engineer

EvenUp; San Francisco (CA); On-site; USD 185,100 - 250,430; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Flexible paid time off

401(k) plan

Job summary

A leading tech company in San Francisco is seeking a Senior Security Engineer to enhance their security team. This role involves risk management, incident response, and ensuring secure coding practices. The ideal candidate will have over 5 years of experience in security-focused engineering, expertise in application security, and strong programming skills in Python. This is a hybrid position requiring presence in the office three days a week, with various benefits offered, including flexible paid time off and competitive compensation.

Qualifications

• 5+ years in a security‑focused engineering role with hands‑on experience.
• Proven security experience at a startup or high‑growth company.
• Deep knowledge of AI‑specific threats.

Responsibilities

• Identify and address security risks.
• Ensure secure coding and protect against data breaches.
• Develop incident response plans.

Skills

Security-focused engineering experience

Expertise in SAST/DAST

Programming skills in Python

Experience with cloud security

Education

Relevant cybersecurity certification (CISSP, CISM, etc.)

Tools

JFrog

Snyk

Job description

EvenUp is on a mission to close the justice gap using technology and AI. We empower personal injury lawyers and victims to get the justice they deserve. Our products enable law firms to secure faster settlements, higher payouts, and better outcomes for victims injured through no fault of their own in vehicle collisions, accidents, natural disasters, and more. We are one of the fastest-growing vertical SaaS companies in history, and we are just getting started. EvenUp is backed by top VCs, including Bessemer Venture Partners, Bain Capital Ventures, SignalFire, and Lightspeed. We are looking to expand our team with talented, driven, and collaborative individuals who seek to have a lasting impact. Learn more at www.evenuplaw.com.

Life as an Engineer at EvenUp 🎥

EvenUp’s security team is growing rapidly to support the company’s mission of ensuring personal injury victims receive fair compensation. With ambitious goals to double the size of our engineering team by the end of 2026, we are looking for a hands‑on Senior Security Engineer to lead and scale our security efforts. You’ll work across functions to design and maintain secure infrastructure, evaluating whether to build or buy solutions as we grow. Your work will be critical in safeguarding our AI‑native document generation platform, trusted by attorneys with over $1.5B in damages claimed to date.

What You’ll Do

• Risk Management: Identify and address security risks through comprehensive assessments, mitigation strategies, and execution.
• Code and Network Security: Ensure secure coding and implement systems to protect against unauthorized access and data breaches.
• Incident Response: Develop and execute incident response plans, conduct forensic analysis, and take preventive measures.
• Compliance and Ethics: Maintain compliance with regulations and industry standards, promote transparency, and address ethical concerns.
• Continuous Monitoring: Establish real‑time monitoring systems, conduct regular assessments, and proactively respond to threats.
• Vendor & Third‑Party Security: Evaluate and secure third‑party integrations to prevent vulnerabilities.
• Security Training: Educate and raise awareness for security best practices across the engineering team.
• Documentation & Reporting: Maintain up‑to‑date documentation on protocols, incidents, and improvements; report regularly to stakeholders.

What We Look For

• 5+ years in a security‑focused engineering role, with hands‑on technical architecture, implementation, and oversight experience.
• Proven security experience at a startup or high‑growth company – you’ve built or scaled a security function before, not just maintained one.
• Expertise in SAST/DAST, application security, and CI/CD pipeline integration.
• Deep knowledge of AI‑specific threats (prompt injection, model poisoning, membership inference, adversarial perturbation, output manipulation).
• Experience implementing security principles, operating system and web application security, and familiarity with the OWASP Top 10 and common threat tactics.
• Knowledge of next‑generation security technologies (SASE, CASB, RASP).
• Hands‑on experience with patch management, software supply chain security, and artifact repositories (e.g., JFrog, Snyk).
• Strong programming or scripting skills in at least one language (e.g., Python, Ruby, Node.js).
• Relevant cybersecurity certification (CISSP, CISM, CISA, CRISC, GIAC, etc.).
• Up‑to‑date on technology and vulnerability trends; ability to secure cloud computing applications and ecosystems.
• Application/infrastructure‑level security design experience, including modern mitigation techniques (e.g., DNS‑SEC, cryptographic fundamentals).
• Strong automation skills with Python.

This is a hybrid role, with an expectation of being in our SF office three days per week.

Benefits & Perks

• Choice of medical, dental, and vision insurance plans for you and your family.
• Additional insurance coverage options for life, accident, or critical illness.
• Flexible paid time off, sick leave, short‑term and long‑term disability.
• 10 US observed holidays, and Canadian statutory holidays by province.
• A home office stipend.
• 401(k) for US‑based employees and RRSP for Canada‑based employees.
• Paid parental leave.
• A local in‑person meet‑up program.
• Hubs in San Francisco and Toronto.

EvenUp is an equal opportunity employer. We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Compensation Range: $185,100 - $250,430