Talent.com
Staff Security Engineer
Staff Security EngineerEvenUp Inc. • San Francisco, CA, United States
No longer accepting applications
Staff Security Engineer

Staff Security Engineer

EvenUp Inc. • San Francisco, CA, United States
6 days ago
Job type
  • Full-time
Job description

EvenUp is on a mission to close the justice gap using technology and AI. We empower personal injury lawyers and victims to get the justice they deserve. Our products enable law firms to secure faster settlements, higher payouts, and better outcomes for victims injured through no fault of their own in vehicle collisions, accidents, natural disasters, and more.

We are one of the fastest-growing vertical SaaS companies in history, and we are just getting started. EvenUp is backed by top VCs, including Bessemer Venture Partners, Bain Capital Ventures, SignalFire, and Lightspeed. We are looking to expand our team with talented, driven, and collaborative individuals who seek to have a lasting impact. Learn more at www.evenuplaw.com.

Today, our engineering team is roughly ~100 people, but by the end of 2026 we'll roughly double the size of the team. With our growth, we're looking for a strong Staff Security Engineer to work cross-functional and manage our security within our infrastructure team. We need a hands-on Staff Security Engineer to lead our Security efforts and drive our growth. You'll help us evaluate building vs buying security solutions.

What you'll do :

  • Risk Management : Identify and address security risks through thorough assessments and mitigation strategies.
  • Code and Network Security : Ensure the secure coding of the platform and implement measures to protect against unauthorized access and data breaches.
  • Incident Response : Develop and execute plans to respond to security incidents, conducting forensic analysis and implementing preventive measures.
  • Compliance and Ethics : Ensure EvenUp systems comply with regulations and industry standards, addressing ethical concerns and promoting transparency.
  • Continuous Monitoring : Establish real-time monitoring systems to detect and respond to security threats, conducting regular assessments.
  • Vendor and Third-Party Security : Assess and secure third-party components integrated into our systems to prevent vulnerabilities.
  • Security Training : Provide training to enhance the team's security awareness and foster a security-conscious culture.
  • Documentation and Reporting : Maintain documentation of security protocols, incidents, and improvements, and communicate regular reports to stakeholders

What we look for :

  • 10+ years of implementation experience in a security-focused role with an emphasis on hands-on secure technical architecture and implementation work, and oversight in a team setting (e.g., conducting solution security reviews)
  • Proven expertise in SAST / DAST, application security, and CI / CD pipeline integration
  • Deep understanding of AI-specific threats - prompt injection, model poisoning, membership inference, adversarial perturbation, and output manipulation
  • In-depth knowledge and implementation experience of information security principles, policy enforcement, operating systems, web application security, and a high-level of familiarity with malicious code uses, OWASP Top 10, and common techniques used by hackers
  • Experience with designing and implementing next-generation security technologies, such as SASE, CASB, or RASP
  • Hands-on experience with application patch management, software supply chain security, or artifact repositories like JFrog and Snyk
  • Strong fluency in at least one programming or scripting language : Python, Ruby, NodeJs
  • Cybersecurity certification (e.g. CISSP, CISM, CISA, CRISC, GIAC or other relevant certification)
  • Up-to-date knowledge and regular monitoring of the evolution of technologies and vulnerabilities to identify the solutions and measures necessary to secure cloud computing applications and ecosystems
  • Hands-on and in-depth experience with application and infrastructure-level design security including modern mitigation techniques and good practices (e.g., DNS-SEC, OWASP Top 10 mitigations, cryptographic fundamentals etc.)
  • Strong hands-on skills with creating automations using Python
  • Nice to haves :

  • Fluency with at least one infrastructure-as-code or configuration management language
  • Experience in the design and implementation of security controls
  • Hands-on experience with GCP security architectures
  • Experience with the implementation of security compliance standards SOC2, HIPAA, and CCPA
  • Experience with design and enforcement of security best practices for the development
  • Experience with planning and execution of security web and infrastructure pen testing
  • Experience with DLP (data loss prevention)
  • Experience with Kubernetes
  • Experience with risk modeling for AI / ML data protection
  • Notice to Candidates :

    EvenUp has been made aware of fraudulent job postings and unaffiliated third parties posing as our recruiting team - please know that we have no affiliation or connection to these situations. We only post open roles on our career page (evenuplaw.com / careers) or reputable job boards like our official or Indeed pages, and all official EvenUp recruitment emails will come from the domains @evenuplaw.com, @evenup.ai, @ext-evenuplaw.com, no-reply@ashbyhq.com or noreply@canditech.io email addresses.

    To ensure fairness and proper consideration, we do not accept resumes or expressions of interest via email or social media messages. If you're interested in a role, please submit your application directly through our careers page.

    If you receive communication from someone you believe is impersonating EvenUp, please report it to us at talent-ops-team@evenuplaw.com. Examples of fraudulent domains include "careers-evenuplaw.com" and "careers-evenuplaws.com".

    Benefits & Perks :

    As part of our total rewards package, we offer attractive benefits and perks to our employees, including :

  • Choice of medical, dental, and vision insurance plans for you and your family
  • Additional insurance coverage options for life, accident, or critical illness
  • Flexible paid time off, sick leave, short-term and long-term disability
  • 10 US observed holidays, and Canadian statutory holidays by province
  • A home office stipend
  • 401(k) for US-based employees and RRSP for Canada-based employees
  • Paid parental leave
  • A local in-person meet-up program
  • Hubs in San Francisco and Toronto
  • Please note the above benefits & perks are for full-time employees

    EvenUp is an equal opportunity employer. We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

    #J-18808-Ljbffr

    Create a job alert for this search

    Staff Security Engineer • San Francisco, CA, United States

    Related jobs
    Staff Security Engineer, Security Partnerships

    Staff Security Engineer, Security Partnerships

    Stripe • San Francisco, CA, United States
    Full-time
    Staff Security Engineer, Security Partnerships.Staff Security Engineer, Security Partnerships.Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's lar...Show more
    Last updated: 5 days ago • Promoted
    Staff Security Engineer, Secure Digital Asset Operations

    Staff Security Engineer, Secure Digital Asset Operations

    P2P • San Francisco, CA, United States
    Full-time
    At Ripple, we’re building a world where value moves like information does today.It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, ...Show more
    Last updated: 30+ days ago • Promoted
    Staff Platform Security Engineer

    Staff Platform Security Engineer

    Gemini • San Francisco, CA, United States
    Full-time
    Staff Platform Security Engineer.Be among the first 25 applicants.Staff Platform Security Engineer.Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offer...Show more
    Last updated: 30+ days ago • Promoted
    Staff Security Software Engineer

    Staff Security Software Engineer

    DigitalOcean • San Francisco, CA, United States
    Full-time
    Dive in and do the best work of your career at DigitalOcean.Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud.If you have a g...Show more
    Last updated: 1 day ago • Promoted
    Staff Platform Security Engineer (IAM)

    Staff Platform Security Engineer (IAM)

    Gemini Trust Company • San Francisco, CA, United States
    Full-time
    Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and in...Show more
    Last updated: 5 days ago • Promoted
    Staff Platform Security Engineer

    Staff Platform Security Engineer

    Gemini, Inc. • San Francisco, CA, United States
    Full-time
    Staff Platform Security Engineer.Be among the first 25 applicants.Staff Platform Security Engineer.Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offer...Show more
    Last updated: 3 days ago • Promoted
    Staff Security Engineer

    Staff Security Engineer

    Credit Genie • San Francisco, CA, United States
    Full-time
    Credit Genie is a mobile-first financial wellness platform designed to help individuals take control of their financial future. We leverage artificial intelligence to provide personalized insights a...Show more
    Last updated: 5 days ago • Promoted
    Staff Blockchain Security Engineer

    Staff Blockchain Security Engineer

    Gemini Trust Company • San Francisco, CA, United States
    Full-time
    Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and in...Show more
    Last updated: 8 days ago • Promoted
    Staff Security Engineer

    Staff Security Engineer

    Zania • San Francisco, CA, United States
    Full-time
    At Zania, were redefining security compliance through cutting-edge AI solutions.Our mission is to empower enterprises with intelligent AI agents that streamline security compliance processes with u...Show more
    Last updated: 3 days ago • Promoted
    Staff Security Operations Engineer

    Staff Security Operations Engineer

    Canonical • San Francisco, CA, United States
    Full-time
    Staff Security Operations Engineer.Continue with Google Continue with Google.Be among the first 25 applicants.Staff Security Operations Engineer. We have opened several senior / staff Security Operati...Show more
    Last updated: 30+ days ago • Promoted
    Remote Staff Security Engineer — Build Secure Platforms

    Remote Staff Security Engineer — Build Secure Platforms

    Parafin • San Francisco, CA, United States
    Remote
    Full-time
    A technology firm is seeking an experienced security-focused engineer to enhance its security posture in cloud environments. The role involves leading security efforts, establishing best practices, ...Show more
    Last updated: 4 days ago • Promoted
    Senior Staff Infrastructure Security Engineer

    Senior Staff Infrastructure Security Engineer

    Promote Project • San Francisco, CA, United States
    Full-time
    Senior Staff Infrastructure Security Engineer.Crusoe is building the Worlds Favorite AI-first Cloud infrastructure company. Were pioneering vertically integrated, purpose-built AI infrastructure sol...Show more
    Last updated: 3 days ago • Promoted
    Staff Engineer

    Staff Engineer

    Bio-Rad Laboratories • Pleasanton, CA, United States
    Full-time
    As a Senior Electrical Engineer, you will play a critical role in designing, debugging, and supporting custom electronics solutions for cutting-edge life science research platforms.You'll drive the...Show more
    Last updated: 30+ days ago • Promoted
    Sr. Staff Engineer

    Sr. Staff Engineer

    Bio-Rad Laboratories • Pleasanton, CA, United States
    Full-time
    You'll drive the development of hardware products that directly impact healthcare innovation and improve lives worldwide. You'll collaborate cross-functionally to.Your expertise in electrical engine...Show more
    Last updated: 30+ days ago • Promoted
    Staff Enterprise Security Engineer

    Staff Enterprise Security Engineer

    Gemini Trust Company • San Francisco, CA, United States
    Full-time
    Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and in...Show more
    Last updated: 5 days ago • Promoted
    Staff Security Engineer

    Staff Security Engineer

    Box • Redwood City, CA, United States
    Full-time
    Box (NYSE : BOX) is the leader in Intelligent Content Management.Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform ...Show more
    Last updated: 30+ days ago • Promoted
    Staff Security Engineer, TDI

    Staff Security Engineer, TDI

    Okta • San Francisco, CA, United States
    Full-time
    We are seeking a highly skilled and hands-on Security Engineer with a DevSecOps focus to join the TDI BT Security team.In this role, you will be embedded directly within our technical environments,...Show more
    Last updated: 8 days ago • Promoted
    Staff Security Engineer

    Staff Security Engineer

    Parafin • San Francisco, CA, United States
    Full-time
    At Parafin, we’re on a mission to grow small businesses.Small businesses are the backbone of our economy, but traditional banks often don’t have their backs. We build tech that makes it simple for s...Show more
    Last updated: 8 days ago • Promoted