Senior Security Engineering Operations

EvenUp is on a mission to close the justice gap using technology and AI. We empower personal injury lawyers and victims to get the justice they deserve. Our products enable law firms to secure faster settlements, higher payouts, and better outcomes for victims injured through no fault of their own in vehicle collisions, accidents, natural disasters, and more.
EvenUp is backed by top VCs, including Bessemer Venture Partners, Bain Capital Ventures, SignalFire, and Lightspeed. Today, our engineering team is roughly ~100 people, but by the end of 2026 we'll roughly double the size of the team. With our growth, we're looking for a strong Senior Security Engineer to work cross-functional and manage our security within our infrastructure team. We need a hands-on Senior Security Engineer to lead our Security efforts and drive our growth. You'll help us evaluate building vs buying security solutions.
Risk Management : Identify and address security risks through thorough assessments and mitigation strategies.
Code and Network Security : Ensure the secure coding of the platform and implement measures to protect against access and data breaches.
Incident Response : Develop and execute plans to respond to security incidents, conducting forensic analysis and implementing preventive measures.
Continuous Monitoring : Establish real-time monitoring systems to detect and respond to security threats, conducting regular assessments.
Security Training : Provide training to enhance the team's security awareness and foster a security-conscious culture.
8+ years of implementation experience in a security-focused role with an emphasis on hands-on secure technical architecture and implementation work, and oversight in a team setting (e.g., Proven expertise in SAST / DAST, application security, and CI / CD pipeline integration
~ Deep understanding of AI-specific threats - prompt injection, model poisoning, membership inference, adversarial perturbation, and output manipulation
~ In-depth knowledge and implementation experience of information security principles, policy enforcement, operating systems, web application security, and a high-level of familiarity with malicious code uses, OWASP Top 10, and common techniques used by hackers
~ Hands-on experience with application patch management, software supply chain security, or artifact repositories like JFrog and Snyk
~ Strong fluency in at least one programming or scripting language : Python, Ruby, NodeJs
~ Cybersecurity certification (e.g. Up-to-date knowledge and regular monitoring of the evolution of technologies and vulnerabilities to identify the solutions and measures necessary to secure cloud computing applications and ecosystems
~ Hands-on and in-depth experience with application and infrastructure-level design security including modern mitigation techniques and good practices (e.g., Strong hands-on skills with creating automations using Python

Fluency with at least one infrastructure-as-code or configuration management language
Experience in the design and implementation of security controls
Experience with the implementation of security compliance standards SOC2, HIPAA, and CCPA
Experience with planning and execution of security web and infrastructure pen testing
Experience with DLP (data loss prevention)
Experience with risk modeling for AI / ML data protection
com / careers) or reputable job boards like our official LinkedIn or Indeed pages, and all official EvenUp recruitment emails will come from the domains @evenuplaw.ai, @ext-evenuplaw.If you're interested in a role, please submit your application directly through our careers page.
Choice of medical, dental, and vision insurance plans for you and your family
~ Flexible paid time off, sick leave, short-term and long-term disability
~10 US observed holidays, and Canadian statutory holidays by province
~ A home office stipend
~A local in-person meet-up program
~ Hubs in San Francisco and Toronto

Please note the above benefits & perks are for full-time employees
We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
#