jobapplier

Security Engineer

Pantheon

Skills

Required

  • detection rules
  • Application Security / Security Engineering
  • CI/CD Fundamentals
  • Jenkins
  • Cloud Build
  • CircleCI
  • reusable workflows
  • Python / Go
  • security automation
  • AWS / Azure
  • Docker
  • Terraform
  • Kubernetes
  • K8s

Preferred

  • SAST / DAST / SCA / CSPM
  • CodeQL
  • Wiz
  • de

Join Pantheon's Security Engineering team as a Security Engineer II. In this hands-on engineering role, you will be responsible for safeguarding, auditing, and testing the security of Pantheon's entire platform. You will own security domains end-to-end, build automation and processes, and write detection rules. This position offers a flexible work environment, health and wellness benefits, and opportunities for professional development.

About Pantheon

  • Agir en tant qu'expert en la matière, en mentorant et en soutenant les efforts d'ingénierie de sécurité au sein de l'organisation.
  • Commitment: Demonstrated commitment to teamwork, professionalism, and authenticity, fostering trust and accountability

Responsibilities

  • Assurer la sécurité, l'audit et les tests de la plateforme cloud de Pantheon, en mettant l'accent sur la sécurité dès la conception.
  • Développer et maintenir des outils de sécurité et des pipelines d'automatisation pour améliorer l'efficacité de l'équipe.
  • Builder Orientation: You measure impact by what you ship — tooling that engineering teams adopt, automation that replaces manual work, detection rules that catch real threats. Not by tickets closed or alerts triaged
  • Communication: Strong communication skills essential for partnering with engineering teams across the organization. You advocate for security priorities and tradeoffs across functions without being prompted

Requirements

  • Grit: Understanding that establishing security best practices is a marathon requiring persistence across many stakeholders
  • CI/CD Fundamentals: Hands-on experience with Jenkins, Cloud Build, CircleCI, or similar (bonus points for experience with reusable workflows)
  • Coding Proficiency: Ability to build maintainable components in Python or Go. You write tools, not just policies
  • Security Tooling: Demonstrated experience building security automation — vulnerability management scripts, CI/CD pipeline integrations, detection rules, or similar tooling that engineering teams use in production
  • Development Practices: Hands-on experience with Secure by Design development practices, including participating in security architecture and design reviews
  • Cloud Proficiency: Experience securing production systems in cloud environments (GCP preferred; AWS or Azure also valuable)
  • Education: Bachelor's degree (preferred) in Computer Science or equivalent practical experience
  • Cloud & Infrastructure: Experience working with containerization (e.g., Docker, OCI), Terraform, and Kubernetes (K8s)
  • Overall Experience: Minimum of 4+ years of overall experience, with at least 2+ years dedicated to Application Security or Security Engineering

Preferred

  • Security Tooling Platforms: Experience with SAST/DAST/SCA/CSPM tools. Familiarity with CodeQL, Wiz, or similar platforms is a plus