Security Engineer II: Build Security Automation & Tooling

RiseMe; San Francisco, Chicago (CA, IL); On-site; CAD 94,000 - 118,000; Full time

Benefits offered by this job

Equity plan

Flexible time off

Medical insurance

Parental leave

In-office (SF & Chicago)

Wellness allowance

Team events

Job summary

Pantheon is seeking a Security Engineer II to join its Security Engineering team. You will own security domains end-to-end, write detection rules, build tooling, and drive automation across the platform.

Role emphasizes Security by Design, multi-layer security controls, and collaboration with engineering squads. Strong emphasis on hands-on coding in Python/Go and cloud-native security practices.

Qualifications

• 4+ years of overall experience with at least 2+ years in Application Security or Security Engineering
• Experience building security automation and tooling used by engineering teams
• Hands-on Secure by Design development practices and security reviews
• Cloud security of production systems (GCP preferred; AWS/Azure valuable)
• Proficiency in Python or Go to build maintainable tooling

Responsibilities

• Author SIEM detection rules and response playbooks
• Build and maintain security automation pipelines
• Own vulnerability identification, triage, and remediation with engineering squads
• Implement supply chain security controls and integrate into workflows
• Execute RBAC cleanup and manage GitHub org security policies
• Triage CSPM findings and cloud security baselines
• Define and implement DLP policies and secrets hygiene

Skills

Security engineering

Python/Go

CI/CD tooling

Vulnerability management

SAST/DAST/SCA

Cloud security

RBAC/IAM

Education

Bachelor's degree in Computer Science or equivalent

Tools

Jenkins

Cloud Build

CircleCI

Terraform

Kubernetes

CodeQL

Wiz

Job description

Pantheon is seeking a Security Engineer II to join its Security Engineering team. You will own security domains end-to-end, write detection rules, build tooling, and drive automation across the platform.

Role emphasizes Security by Design, multi-layer security controls, and collaboration with engineering squads. Strong emphasis on hands-on coding in Python/Go and cloud-native security practices.