Security Engineer II

This is a fully remote position, open to applicants in California.

📋 Description

• Investigate active compromises on shared, virtualized, and dedicated Linux hosts.

• Define the extent of incidents, contain them, gather evidence, and create detailed reports.

• Develop malware and webshell signatures along with log-based detection mechanisms.

• Mitigate false positives and reduce alert fatigue on a large scale.

• Assess the security of in-house control planes, customer panels, internal tools, and third-party/open-source dependencies.

• Enhance secrets management by transitioning static credentials to Vault, adopting dynamic credentials, and removing plaintext secrets from code, logs, and CI.

• Oversee identity and access lifecycle, including directory and SSO migrations, privileged access evaluations, and effective offboarding processes.

• Manage vulnerabilities and patch management across a diverse fleet, including end-of-life OS and runtime remediation.

• Create automation and tools for repetitive security and operational tasks.

• Evaluate and manage internal AI and agent tools regarding data exposure, permission scopes, agent identities, and potential abuse paths.

• Lead intricate security incident investigations and coordinate efforts across teams.

• Design and implement protective measures for customer sites, accounts, and infrastructure.

• Perform vulnerability assessments, security reviews, and risk analyses with actionable remediation advice.

• Collaborate with Systems, Development, Abuse, and Support teams to enforce security controls.

• Mentor junior team members and contribute to shared knowledge and documentation.

• Participate in the formulation of security policies, standards, processes, and compliance initiatives.

⛳️ Requirements

• 3–6 years of experience in security engineering, incident response, application security, offensive security, or systems administration.

• Proven ability to independently resolve complex security challenges.

• Expertise in at least one area of application security, incident response and detection engineering, or offensive security and penetration testing, with working knowledge in the other two domains.

• Strong practical knowledge of Linux, preferably Debian/Ubuntu, covering processes, namespaces, capabilities, filesystems, kernels, and failure modes.

• Experience managing long-lived production systems, including repairing hosts under load.

• Background in multi-tenant or customer-facing environments with untrusted users.

• Experience in production scripting and automation using Python, Go, Bash, Perl, or similar languages.

• Proficient in log analysis and investigation at scale.

• Familiar with intrusion detection systems and web application firewalls such as mod_security.

• Working knowledge of security in AWS, GCP, Azure, or OpenStack, including IAM, network controls, and workload isolation.

• Understanding of secrets management and CI/CD security, including Vault or equivalent, pipeline hardening, and supply-chain risk.

• Proficient in Git and infrastructure as code tools like Ansible.

• Current familiarity with AI tools used in daily engineering tasks.

• Strong written and verbal communication skills, including the ability to translate technical risks for non-technical audiences.

• Strong ethical standards, healthy skepticism, and the ability to remain effective under pressure.

• Eligibility to work in the United States without visa sponsorship.

• Nice to have: Experience in web hosting or managing WordPress at scale.

• Nice to have: Knowledge of container and orchestration security with Podman, Docker, or Kubernetes.

• Nice to have: Experience in malware analysis, YARA rule creation, or reverse engineering.

• Nice to have: Experience with detection-as-code or SIEM engineering.

• Nice to have: Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tools.

• Nice to have: Experience with prompt injection, tool-permission scoping, or data-boundary work.

• Nice to have: Familiarity with PCI DSS, SOC 2, or ISO 27001 standards.

• Nice to have: Contributions to open-source projects.

🏝️ Benefits

• Comprehensive health, vision, and dental coverage for the entire family at no cost to the team member.

• 3% Safe Harbor contribution to 401(k) plus up to 1% employer matching.

• Opportunities for profit sharing and bonuses.

• Generous time-off policy starting with 15 vacation days.

• 11 paid holidays.

• Paid sick leave accruing 80 hours.

• Tuition reimbursement at a 50/50 rate up to a specified amount.

• Pet insurance.

• Thrive Pass wellness allowance of $30 each month.

• Access to Udemy online learning courses.

• Disability insurance.

• Generous maternity and paternity leave.

• Discounted personal travel through the corporate booking program, Egencia.

• Relaxed workplace atmosphere.

• Enjoyable monthly company events.

• Free web hosting services.

• Company-issued laptop.

• Opportunities for professional growth.

• Extensive training programs.