Security Engineer II - Automation & Cloud Security

WebHosting; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Pantheon is seeking a Security Engineer II to join its Security Engineering team. This hands-on role bridges execution and tooling, owning security domains end-to-end while building automation that multiplies the team’s impact across engineering.

You will write detection rules, build vulnerability tooling, implement supply chain security controls, and develop CI/CD integrations that scale security across Pantheon’s cloud platform.

Qualifications

• You are motivated by building automation that scales security
• Strong collaboration with engineering teams to prioritize security
• Demonstrated commitment to teamwork and professionalism
• Persistent and proactive in establishing security best practices

Responsibilities

• Detection Engineering: Author SIEM detection rules and response playbooks in Chronicle / Google SecOps (YARA-L).
• Security Tooling Development: Build and maintain security automation pipelines (Python/Go) – vulnerability tooling and CI/CD integrations.
• Vulnerability Management: Own vulnerability identification, triage, and remediation coordination across app and infra layers.
• Supply Chain Security: Implement supply chain security controls (Aikido, SLSA, dependency pinning).
• Access & Identity: Execute RBAC cleanup and manage GitHub org security policies and access controls.
• Cloud Security: Triage CSPM findings, validate cloud security baselines, and secure Snowflake data.
• DLP & Secrets: Define DLP policies and run credential hygiene programs in repos.

Skills

Security engineering

Automation pipelines

Python/Go

SIEM detection

RBAC

Cloud security

DLP/secrets

Tools

Chronicle/SecOps (YARA-L)

GHAS automation

Vulnerability tooling

Aikido

SLSA

Snowflake

Job description

Pantheon is seeking a Security Engineer II to join its Security Engineering team. This hands-on role bridges execution and tooling, owning security domains end-to-end while building automation that multiplies the team’s impact across engineering.

You will write detection rules, build vulnerability tooling, implement supply chain security controls, and develop CI/CD integrations that scale security across Pantheon’s cloud platform.