Security Engineer II

🔥 1 minute ago

🇨🇦 Canada – Remote

💵 $94k - $1.2M / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pantheon Platform

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

📣 Marketing

☁️ SaaS

Consulting • Marketing • SaaS

Pantheon Platform is the WebOps platform for managing websites built on Drupal and WordPress. The company focuses on empowering developers, IT professionals, and marketers to develop, test, and release website changes quickly and reliably, thereby enhancing the management of single or multiple websites. With its cloud-native software, Pantheon aims to help organizations create value through efficient website operations.

📋 Description

• Implement Security by Design within agile software development and cloud-native environments • Build and maintain security tooling and automation that scales the security team's impact • Act as a Subject Matter Expert, mentoring and supporting security engineering efforts across the organization • Contribute to application security policy, processes, standards, and guidelines, and build tooling that enforces them • Help engineering teams design and build high-performing, secure applications using risk-based mitigation • Author SIEM detection rules and response playbooks in Chronicle / Google SecOps using YARA-L • Build and maintain Python/Go security automation pipelines, vulnerability management tooling, GHAS automation, and CI/CD security integrations • Own vulnerability identification, triage, and remediation coordination across application and infrastructure layers • Implement supply chain security controls including Aikido, SLSA, and dependency pinning • Execute RBAC cleanup, access architecture implementation, user access reviews, and GitHub organization security policies • Execute CSPM findings triage, cloud security baseline validation, and Snowflake data warehouse security implementation • Define DLP policies and evaluate tooling; execute credential and secrets hygiene programs

🎯 Requirements

• Minimum of 4+ years of overall experience, with at least 2+ years dedicated to Application Security or Security Engineering • Demonstrated experience building security automation — vulnerability management scripts, CI/CD pipeline integrations, detection rules, or similar tooling that engineering teams use in production • Hands-on experience with Secure by Design development practices, including participating in security architecture and design reviews • Experience securing production systems in cloud environments (GCP preferred; AWS or Azure also valuable) • Ability to build maintainable components in Python or Go • Hands-on experience with Jenkins, Cloud Build, CircleCI, or similar • Experience with containerization (e.g., Docker, OCI), Terraform, and Kubernetes (K8s) • Experience with SAST/DAST/SCA/CSPM tools • Familiarity with CodeQL, Wiz, or similar platforms is a plus • Bachelor's degree in Computer Science preferred, or equivalent practical experience • Strong communication skills • Commitment to teamwork, professionalism, and authenticity • Visa Sponsorship is not available at this time

🏖️ Benefits

• Industry competitive compensation and equity plan • Flexible time off, sick days, and 13 paid holidays • Comprehensive medical insurance including Health, Dental and Vision • Paid parental leave (plus fertility, adoption and other family planning benefits) • Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development • Events and activities both team-based and company wide that inspire, educate and cultivate