Security Engineer II: Cloud Security & Tooling

Pantheon; San Francisco, Chicago (CA, IL); On-site; CAD 94,000 - 118,000; Full time

Benefits offered by this job

Equity plan

Flexible time off

Medical insurance

Parental leave

In-office workspace

Wellness allowance

Learning/Training budget

Job summary

Pantheon is seeking a Security Engineer II to join the Security Engineering team and own security domains end-to-end. You will build automation, develop detection rules, and drive vulnerability management across Pantheon's cloud-hosted platform.

You will work hands-on across detection engineering, security tooling, and supply chain security, mentoring others while advancing security best practices within agile, cloud-native environments.

Qualifications

• 4+ years of overall experience; 2+ years in Application Security or Security Engineering
• Experience building security automation—vulnerability management scripts and CI/CD integrations
• Hands-on Secure by Design development practices, security architecture reviews
• Cloud production security experience (GCP preferred)
• Proficient in Python or Go; ability to build maintainable tooling
• Familiarity with containerization (Docker), Terraform, Kubernetes

Responsibilities

• Author SIEM detection rules and response playbooks
• Build/maintain security automation pipelines and CI/CD integrations
• Own vulnerability identification, triage, and remediation coordination
• Implement supply chain security controls (Aikido, SLSA, dependency pinning)
• Manage RBAC and GitHub org-level security policies
• Triage CSPM findings and data warehouse security measures
• Define DLP policies and manage secrets hygiene

Skills

Security engineering

Security tooling

Python/Go

Cloud security

CI/CD

GCP

Docker/Kubernetes

CodeQL/Wiz

Education

Bachelor's degree in CS or related field

Tools

Jenkins

Cloud Build

CircleCI

GHAS automation

Job description

Pantheon is seeking a Security Engineer II to join the Security Engineering team and own security domains end-to-end. You will build automation, develop detection rules, and drive vulnerability management across Pantheon's cloud-hosted platform.

You will work hands-on across detection engineering, security tooling, and supply chain security, mentoring others while advancing security best practices within agile, cloud-native environments.