Security Engineer II

Job not on LinkedIn

🔥 0 minutes ago

🌵 Arizona – Remote

🌵 Arizona – Remote

💵 $125k - $145k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DreamHost

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1997

💼 Consulting

📣 Marketing

📦 Logistics

💰 Debt Financing on 2018-10

Consulting • Marketing • Logistics

DreamHost is a leading web hosting provider with over 20 years of experience, specializing in hosting solutions for WordPress sites. They offer various hosting packages including Shared, VPS, Dedicated, and Cloud Hosting, each designed to optimize performance, security, and ease of use. DreamHost also provides additional services such as domain registration, email hosting, and comprehensive website management and marketing services. They emphasize privacy and open-source solutions, ensuring customer data security and support available 24/7. Their offerings are catered to accommodate the needs of individuals, small businesses, and enterprises alike.

📋 Description

• Investigate and resolve complex security incidents across shared, virtualized, and dedicated Linux hosts • Scope blast radius, contain compromises, preserve evidence, and produce incident write-ups • Design and implement safeguards for customer sites, accounts, and infrastructure • Build malware and webshell signatures and log-based detections while reducing false positives • Review the security of in-house applications, infrastructure, control plane, customer panel, internal tooling, and third-party/open-source dependencies • Modernize secrets management by moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets • Manage identity and access lifecycle, including directory and SSO migration, privileged access reviews, and offboarding • Drive vulnerability management and patch velocity across a heterogeneous fleet, including end-of-life OS and runtime remediation • Build automation and tooling for detection, monitoring, response, and operational safety • Review and govern internal AI and agent tooling for data exposure, permission scope, agent identity, and abuse paths • Partner with Systems, Development, Abuse, and Support to implement security controls • Mentor less experienced team members and contribute to shared knowledge and runbooks • Contribute to security policies, standards, processes, and compliance efforts

🎯 Requirements

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration • Demonstrated ability to resolve complex security problems independently • Depth in at least one of application security, incident response and detection engineering, or offensive security and penetration testing, plus working competence in the other two • Strong hands-on Linux, preferably Debian/Ubuntu, including processes, namespaces, capabilities, filesystems, kernels, and failure modes • Experience operating long-lived production systems, including repairing hosts in place under load with real users • Experience in multi-tenant or customer-facing environments where users are untrusted • Production scripting and automation experience using Python, Go, Bash, Perl, or similar • Log analysis and investigation at scale • Familiarity with intrusion detection and web application firewalls such as mod_security • Working knowledge of cloud platform security, including AWS, GCP, Azure, or OpenStack, IAM, network controls, and workload isolation • Familiarity with secrets management and CI/CD security, including Vault or equivalent, pipeline hardening, dependency and supply-chain risk • Fluency with version control and infrastructure as code, including Git and Ansible or similar • Practical, current fluency with AI tooling used in real engineering work • Clear written and verbal communication, including translating technical risk for non-technical stakeholders • Strong sense of ethics, healthy skepticism, and ability to stay useful under pressure

🏖️ Benefits

• Full health/vision/dental for the entire family at zero cost to team member • 3% Safe Harbor contributed to 401(k) plus up to 1% employer match • Opportunities for profit sharing and bonuses • Generous time-off (starting at 15 vacation days) • 11 Paid holidays • Paid sick leave (80 hours accrued) • Tuition reimbursement (50/50 up to a specific amount) • Pet Insurance • Thrive Pass wellness allowance of $30 per month • Udemy online learning courses • Disability Insurance • Generous maternity/paternity leave • Discounted personal travel through corporate booking program Egencia • Laid-back atmosphere • Fun monthly company events • Free web hosting • Company-issued laptop • Opportunities for growth • Extensive training