Security Engineer II

🕒 Outubro 19

🏄 California – Remoto

🏄 California – Remote

💵 $125.000 - $145.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

DreamHost

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 1997

💼 Consultoria

📣 Marketing

📦 Logística

💰 Debt Financing em 2018-10

Consulting • Marketing • Logistics

A DreamHost é um provedor de hospedagem web líder com mais de 20 anos de experiência, especializado em soluções de hospedagem para sites WordPress. A empresa oferece diversos pacotes de hospedagem, incluindo Hospedagem Compartilhada, VPS, Dedicada e em Nuvem, cada qual projetado para otimizar o desempenho, a segurança e a facilidade de uso. A DreamHost também fornece serviços adicionais, como registro de domínios, hospedagem de e-mail, e serviços abrangentes de gerenciamento e marketing de sites. A empresa dá ênfase à privacidade e a soluções de código aberto, garantindo a segurança dos dados dos clientes e suporte disponível 24 horas por dia, 7 dias por semana. Suas ofertas são voltadas para atender às necessidades de indivíduos, pequenas empresas e grandes corporações.

Descrição

• Investigate live compromises across shared, virtualized, and dedicated Linux hosts • Scope blast radius, contain incidents, preserve evidence, and produce write-ups • Build malware and webshell signatures and log-based detections • Reduce false positives and alert fatigue at fleet scale • Review the security of in-house control plane, customer panel, internal tooling, and third-party/open-source dependencies • Modernize secrets management by moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI • Manage identity and access lifecycle, including directory and SSO migration, privileged access review, and durable offboarding • Manage vulnerabilities and patch velocity across a heterogeneous fleet, including end-of-life OS and runtime remediation • Build automation and tooling for repetitive security and operational tasks • Review and govern internal AI and agent tooling for data exposure, permission scope, agent identity, and abuse paths • Lead complex security incident investigations and coordinate across teams • Design and implement safeguards for customer sites, accounts, and infrastructure • Conduct vulnerability assessments, security reviews, and risk analysis with actionable remediation guidance • Partner with Systems, Development, Abuse, and Support to implement security controls • Mentor less experienced team members and contribute to shared knowledge and runbooks • Contribute to security policies, standards, processes, and compliance efforts

🎯 Requisitos

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration • Demonstrated ability to resolve complex security problems independently • Depth in at least one of application security, incident response and detection engineering, or offensive security and penetration testing, plus working competence in the other two • Strong hands-on Linux, preferably Debian/Ubuntu, including processes, namespaces, capabilities, filesystems, kernels, and failure modes • Experience operating long-lived production systems, including repairing hosts in place under load • Experience in multi-tenant or customer-facing environments where users are untrusted • Production scripting and automation experience using Python, Go, Bash, Perl, or similar • Log analysis and investigation at scale • Experience with intrusion detection and web application firewalls such as mod_security • Working knowledge of AWS, GCP, Azure, or OpenStack security, including IAM, network controls, and workload isolation • Familiarity with secrets management and CI/CD security, including Vault or equivalent, pipeline hardening, dependency and supply-chain risk • Fluency with Git and infrastructure as code such as Ansible • Practical, current fluency with AI tooling used in daily engineering work • Clear written and verbal communication, including translating technical risk for non-technical stakeholders • Strong ethics, healthy skepticism, and ability to remain useful under pressure • Ability to work in the United States without visa sponsorship • Nice to have: Web hosting or WordPress-at-scale experience • Nice to have: Container and orchestration security with Podman, Docker, or Kubernetes • Nice to have: Malware analysis, YARA rule authorship, or reverse engineering • Nice to have: Detection-as-code or SIEM engineering experience • Nice to have: Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling • Nice to have: Prompt injection, tool-permission scoping, or data-boundary work • Nice to have: Familiarity with PCI DSS, SOC 2, or ISO 27001 • Nice to have: Open source contributions

🏖️ Benefícios

• Full health/vision/dental for the entire family at zero cost to team member • 3% Safe Harbor contributed to 401(k) plus up to 1% employer match • Opportunities for profit sharing and bonuses • Generous time-off (starting at 15 vacation days) • 11 Paid holidays • Paid sick leave (80 hours accrued) • Tuition reimbursement (50/50 up to a specific amount) • Pet Insurance • Thrive Pass wellness allowance of $30 per month • Udemy online learning courses • Disability Insurance • Generous maternity/paternity leave • Discounted personal travel through corporate booking program Egencia • Laid-back atmosphere • Fun monthly company events • Free web hosting • Company-issued laptop • Opportunities for growth • Extensive training

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo