Senior Security Data Analyst

We are seeking a highly motivated and experienced Senior Security Data Analyst to join our Security and Trust (S&T) team. In this role, you will enhance Everlaw’s security posture by analyzing security data to uncover key insights and trends, developing data-driven solutions, and improving team efficiency through automation of governance, compliance and security operations processes. Your expertise in business intelligence, analytics, and automation will play a critical role in strengthening our security strategy.

The ideal candidate has a strong background in security analytics and intelligence, with experience in SIEM tools, security telemetry, and log analysis. You excel at identifying trends and anomalies to enhance security decision-making and possess strong scripting and problem-solving skills to optimize security operations and compliance processes through automation. In this role, you will partner with cross-functional teams  to develop dashboards, manage security tools, and automate security processes, ensuring alignment with Everlaw’s security mission and objectives.

Everlaw’s mission is to promote justice by illuminating truth. Our company culture is open and vibrant and we’re committed to the professional growth of our team members, offering an annual learning and development stipend and regular check-ins with managers regarding career goals. If you’re looking for a place that values passion, integrity, thinking big, and a desire to learn, we’d love to hear from you! Think you’re missing some of the skills and are hesitant to apply? We do not believe in the ‘perfect’ candidate and encourage you to apply if you feel you can bring value to our team.

This is a full-time position based in our Oakland, California office with a hybrid work schedule: in office M/W/Th with the option to work from home Tu/Fr.

Getting started

• We want you to feel like part of the team early on! Our onboarding process will integrate you into the company with informative sessions on our product, policies, processes, and team structure and goals. You’ll spend meaningful time getting to know your direct reports and discover what excites and challenges them.
• We’re excited for you to learn, grow, and contribute right away! We trust that you’ll bring experience and knowledge that will uplift and uplevel the team, but we don’t expect you to know everything on Day 1.

In your role, you'll...

• Design, configure, and manage corporate SIEM tools to enhance threat detection and incident response.
• Optimize alerting mechanisms to reduce noise and false positives, ensuring security teams focus on high-fidelity threats.
• Aggregate and analyze corporate security events across multiple telemetry sources to identify trends, anomalies, and emerging threats.
• Collaborate with corporate security engineers to improve rule sets, fine-tune detections, and enhance threat intelligence integration.
• Develop and maintain security and compliance dashboards to provide visibility into program effectiveness.
• Track security KPIs, compliance trends, and incident response metrics, surfacing insights for leadership and stakeholders.
• Automate security and compliance reporting
• Analyze security initiative data (e.g., phishing campaigns, security awareness programs) to identify trends, measure effectiveness, and provide actionable insights for continuous improvement.
• Identify opportunities to automate manual security and compliance workflows, improving operational efficiency.
• Optimize security and compliance tools (e.g., SIEM, CSPM, Trust Portal, audit evidence collection platforms) to meet team needs.
• Support the implementation and management of the Customer Trust Portal, ensuring smooth interactions with customers regarding security concerns.
• Automate compliance audit evidence gathering and responses to customer RFIs related to security and compliance, improving response accuracy and turnaround time.
• Streamline customer security request intake and tracking, developing dashboards to measure KPI and SLA performance.

About you

• You have a Bachelor's degree in IT, Information Security, Information Management, Computer Science, or a related field.
• You have over 5 years of experience as a Security Analyst, Data Analyst/Engineer or an Information Security Analyst, with at least 3 years in building automation and dashboards. 
• You have a good understanding of security concepts such as role based access, endpoint protection, vulnerability management, etc.
• You have strong scripting skills, such as experience with SQL and/or Python skills.
• You have excellent communication skills, both written and verbal, with the ability to work with technical and non-technical stakeholders