Job description
We’re looking for a Security Analyst / Senior Security Analyst to join our corporate Security Operations team and focus on securing our internal corporate systems and infrastructure. This role is critical in protecting our company’s employees, data, and assets from cyber threats. You will be responsible for a wide range of security activities, including threat detection, incident response, vulnerability management, vendor risk management, and security awareness. This position requires a proactive mindset, strong technical skills, and a commitment to continuous learning in a fast-paced environment.
Getting started
Paragraph text, left-aligned, bold supported
In your role, you’ll…
Threat Detection & Monitoring:
- Monitor security alerts from various sources (SIEM, EDR, network logs) to identify and investigate potential security incidents.
- Analyze system logs and network traffic to detect anomalous behavior and indicators of compromise (IOCs).
Incident Response:
- Respond to and investigate reported phishing emails, quarantining malicious content and analyzing threats.
- Serve as a key responder during security incidents, following established procedures for containment, eradication, and recovery.
- Conduct analysis to determine the root cause of incidents and provide recommendations to prevent recurrence.
- Document all phases of the incident response lifecycle.
Vendor Risk Management:
- Conduct vendor security risk reviews for new and existing third-party services, evaluating their security posture and compliance.
Vulnerability Management:
- Perform regular vulnerability scans of corporate systems and infrastructure.
- Analyze scan results, prioritize vulnerabilities based on risk, and work with IT teams to ensure timely remediation.
Tooling, Policy & Security Awareness Support
- Help test and validate security policy updates across tools such as CrowdStrike, FortiDLP, BeyondTrust, and Okta.
- Support webhook testing, automation pilots, or policy rollout validation in coordination with senior staff.
- Maintain internal documentation for alert triage, configuration guides, and user-facing security guidance.
- Contribute to the development of security awareness training for all employees.
About you
- Security analyst or similar role, typically 3+ years for Security Analyst, or 6+ years for Senior Security Analyst.
- Hands-on work with security tools such as SIEM platforms (e.g., Datadog, Splunk), EDR solutions (e.g., CrowdStrike), and vulnerability scanners (e.g., Nessus).
- Incident response experience, including investigating, containing, and remediating security incidents.
Technical Skills:
- Familiarity with supporting Windows, macOS, and Ubuntu endpoints.
- Understanding of APIs and their security implications, particularly for vendor security assessments.
- Strong grasp of networking fundamentals (TCP/IP, firewalls, proxies, SD-WANs, SSH) and the ability to interpret logs and system telemetry.
- Ability to analyze logs from EDR tools, cloud consoles, and email headers to identify indicators of compromise or policy violations.
- Knowledge of cloud security principles and common platforms (AWS, Azure, GCP).
- Experience with scripting languages (e.g., Python, Bash, PowerShell) is a plus.
Soft Skills:
- Excellent problem-solving and analytical skills.
- Strong communication and collaboration skills, with the ability to explain technical issues to non-technical stakeholders.
- Self-starter who can manage multiple priorities independently.
Benefits
- The expected salary range for the Security Analyst role is between $109,000 - $138,000 and for the Senior Security Analyst is $137,000 - 173,000. The final offered salary will be dependent upon many factors including the candidate’s experience and skills. The base pay range is subject to change in the future.
- Substantial equity
- 401k with company matching
- Health, dental, and vision
- Flexible Spending Accounts for health and dependent care expenses
- Paid parental leave and sick leave
- Seventeen paid vacation days plus ten bankable federal holidays
- Four “Everlawlidays” that are designated days off for the whole company
- Annual allocation for Learning & Development opportunities and applicable professional membership dues
- Company-sponsored life and disability insurance
Perks
- Work in Downtown Oakland, just steps from the BART line and dozens of restaurants
- You will get a powerful Linux laptop and be able to customize your desk setup
- Bond over team lunches and out-of-the-box events
- Ranked “#1 on G2 for Ediscovery Software and Momentum” and we offer free eDiscovery resources to benefit the greater societal good with Everlaw for Good
- Time off for company-sponsored volunteer events and 4 paid hours per quarter to volunteer at a charitable organization of your choice
- Take advantage of learning and career development opportunities
- Ranked #9 on Glassdoor’s Best Places to Work 2023 for US small and medium companies
- One of Wealthfront’s 2021 Career Launching Companies, and ranked #2 on the “2022 Bay Area Best Places to Work” list by the San Francisco Business Times and the Silicon Valley Business Journal
- One of Fast Company’s World’s Most Innovative Companies for 2022 and proud contributor of free ediscovery resources to benefit the greater good through “Everlaw for Good”
- #LI-JA1
- #LI-Hybrid
Pursue Truth While Finding Yours
At Everlaw, we are deeply invested in pursuing the truth, for our clients and for our employees. We know that when you’re empowered to pursue your passions, it is reflected in the work. That’s why we’re committed to the professional growth of all our team members, offering an annual learning and development stipend and regular career check-ins with managers. If you’re looking for a place that values passion, integrity, and a desire to learn, we’d love to hear from you!
About Everlaw
We help law firms, government agencies, and corporations sift through millions of documents of evidence in big lawsuits and investigations to find the proverbial smoking gun (or needle in the haystack – pick your metaphor). It’s a multi-billion dollar space typically dominated by service-oriented vendors, and we’re coming at it with cutting-edge technology and elegant design. It’s working, and we’ve been growing very rapidly: we host hundreds of terabytes of data and work with all 50 state Attorneys General and hundreds of law firms on some of the most high-profile cases litigated today.
Everlaw is an equal opportunity employer. We pride ourselves on having a diverse workforce and we do not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We respect the gender, gender identity and gender expression of our applicants and employees, and we honor requests for pronouns. It is our policy to comply with all applicable national, state and local laws pertaining to nondiscrimination and equal opportunity, including the California Equal Pay Act. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
We collect and process the personal information you provided along with your job application in accordance with our Applicants Privacy Notice and Notice at Collection. We use Covey as part of our hiring and/or promotional processes. As part of the evaluation process, we provide Covey with job requirements and candidate-submitted applications. Certain features of the platform may qualify it as an Automated Employment Decision Tool (AEDT) under applicable regulations. For positions in New York City, our use of Covey complies with NYC Local Law 144. We began using Covey Scout for Inbound on the 9th of June, 2025.
