Security Engineer II
Pantheon Systems, Inc5 days ago
Remote, CanadaMid Level
Responsibilities
- Author SIEM detection rules and response playbooks in Chronicle and Google SecOps using YARA-L.
- Build and maintain security automation pipelines in Python or Go, including vulnerability management, GHAS, and CI/CD security integrations.
- Own vulnerability identification, triage, and remediation coordination across application and infrastructure layers.
- Implement supply chain security controls using Aikido, SLSA, dependency pinning, and engineering workflow integrations.
- Execute RBAC cleanup, access architecture implementation, user access reviews, and GitHub organization-level security controls.
- Triage cloud security baseline findings and implement cloud security and Snowflake data warehouse security controls.
- Define DLP policies and improve credential and secrets hygiene across repositories.
- Mentor security engineering efforts and contribute to application security policies, standards, processes, and guidelines.
Requirements
- At least 4 years of overall professional experience, including at least 2 years in Application Security or Security Engineering.
- Experience building production security automation, vulnerability management scripts, CI/CD integrations, detection rules, or comparable tooling.
- Hands-on experience with Secure by Design practices, security architecture, and design reviews.
- Experience securing production systems in cloud environments; GCP is preferred, with AWS or Azure also valuable.
- Ability to build maintainable components in Python or Go.
- Hands-on experience with Jenkins, Cloud Build, CircleCI, or similar CI/CD tools.
- Experience with Docker or OCI containerization, Terraform, and Kubernetes.
- Experience with SAST, DAST, SCA, or CSPM tools; CodeQL and Wiz experience is a plus.
- Bachelor’s degree in Computer Science is preferred, or equivalent practical experience.
- Strong communication, teamwork, professionalism, persistence, and cross-functional collaboration skills.
Benefits
- Industry-competitive compensation, bonus, and equity plan.
- Flexible time off, sick days, and 13 paid holidays.
- Comprehensive medical, dental, and vision insurance.
- Paid parental leave plus fertility, adoption, and other family planning benefits.
- In-office workspace in San Francisco and Chicago.
- Monthly allowance for wellness and reading, plus LinkedIn Learning access.
- Team and company-wide events and activities.
Tech Stack
AWSAzureCircleCIDockerDrupalGoGoogle Cloud PlatformJenkinsKubernetesPythonSnowflakeTerraformWordPress
Categories
About Pantheon Systems, Inc
Pantheon Systems provides a WebOps PaaS for building, hosting, and scaling Drupal, WordPress, and Next.js sites, with integrated CI/CD, governance, CDN, and security. It sells subscription plans to enterprises, agencies, and universities that manage multi-site portfolios and developer workflows in the cloud. Founded in 2010 and headquartered in San Francisco, the privately held company powers 300,000+ websites for organizations such as Google, Princeton, Clorox, Salesloft, and the United Nations.