Security Engineer II

🔥 13 hours ago

🏄 California – Remote

🏄 California – Remote

💵 $125k - $145k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DreamHost

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1997

💼 Consulting

📣 Marketing

📦 Logistics

💰 Debt Financing on 2018-10

Consulting • Marketing • Logistics

DreamHost is a leading web hosting provider with over 20 years of experience, specializing in hosting solutions for WordPress sites. They offer various hosting packages including Shared, VPS, Dedicated, and Cloud Hosting, each designed to optimize performance, security, and ease of use. DreamHost also provides additional services such as domain registration, email hosting, and comprehensive website management and marketing services. They emphasize privacy and open-source solutions, ensuring customer data security and support available 24/7. Their offerings are catered to accommodate the needs of individuals, small businesses, and enterprises alike.

📋 Description

• Investigate live compromises across shared, virtualized, and dedicated Linux hosts • Scope blast radius, contain incidents, preserve evidence, and produce write-ups • Build malware and webshell signatures and log-based detections • Reduce false positives and alert fatigue at fleet scale • Review the security of in-house control plane, customer panel, internal tooling, and third-party/open-source dependencies • Modernize secrets management by moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI • Manage identity and access lifecycle, including directory and SSO migration, privileged access review, and durable offboarding • Manage vulnerabilities and patch velocity across a heterogeneous fleet, including end-of-life OS and runtime remediation • Build automation and tooling for repetitive security and operational tasks • Review and govern internal AI and agent tooling for data exposure, permission scope, agent identity, and abuse paths • Lead complex security incident investigations and coordinate across teams • Design and implement safeguards for customer sites, accounts, and infrastructure • Conduct vulnerability assessments, security reviews, and risk analysis with actionable remediation guidance • Partner with Systems, Development, Abuse, and Support to implement security controls • Mentor less experienced team members and contribute to shared knowledge and runbooks • Contribute to security policies, standards, processes, and compliance efforts

🎯 Requirements

• 3–6 years in security engineering, incident response, application security, offensive security, or systems administration • Demonstrated ability to resolve complex security problems independently • Depth in at least one of application security, incident response and detection engineering, or offensive security and penetration testing, plus working competence in the other two • Strong hands-on Linux, preferably Debian/Ubuntu, including processes, namespaces, capabilities, filesystems, kernels, and failure modes • Experience operating long-lived production systems, including repairing hosts in place under load • Experience in multi-tenant or customer-facing environments where users are untrusted • Production scripting and automation experience using Python, Go, Bash, Perl, or similar • Log analysis and investigation at scale • Experience with intrusion detection and web application firewalls such as mod_security • Working knowledge of AWS, GCP, Azure, or OpenStack security, including IAM, network controls, and workload isolation • Familiarity with secrets management and CI/CD security, including Vault or equivalent, pipeline hardening, dependency and supply-chain risk • Fluency with Git and infrastructure as code such as Ansible • Practical, current fluency with AI tooling used in daily engineering work • Clear written and verbal communication, including translating technical risk for non-technical stakeholders • Strong ethics, healthy skepticism, and ability to remain useful under pressure • Ability to work in the United States without visa sponsorship • Nice to have: Web hosting or WordPress-at-scale experience • Nice to have: Container and orchestration security with Podman, Docker, or Kubernetes • Nice to have: Malware analysis, YARA rule authorship, or reverse engineering • Nice to have: Detection-as-code or SIEM engineering experience • Nice to have: Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling • Nice to have: Prompt injection, tool-permission scoping, or data-boundary work • Nice to have: Familiarity with PCI DSS, SOC 2, or ISO 27001 • Nice to have: Open source contributions

🏖️ Benefits

• Full health/vision/dental for the entire family at zero cost to team member • 3% Safe Harbor contributed to 401(k) plus up to 1% employer match • Opportunities for profit sharing and bonuses • Generous time-off (starting at 15 vacation days) • 11 Paid holidays • Paid sick leave (80 hours accrued) • Tuition reimbursement (50/50 up to a specific amount) • Pet Insurance • Thrive Pass wellness allowance of $30 per month • Udemy online learning courses • Disability Insurance • Generous maternity/paternity leave • Discounted personal travel through corporate booking program Egencia • Laid-back atmosphere • Fun monthly company events • Free web hosting • Company-issued laptop • Opportunities for growth • Extensive training