Security Engineer II: Remote, Automate & Harden Cloud Apps

Pantheon; San Francisco (CA); Remote; CAD 90,000 - 140,000; Full time

Benefits offered by this job

Health & Wellness

Remote & In‑Office

Flexible Time‑Off

Book & Gym Allowance

Promoting Inclusivity

Donation Matching

Employee Resource Groups

Professional Development

Job summary

PANTHEON is seeking a Security Engineer II to advance our security program across the Pantheon platform. This hands-on role focuses on building detection rules, vulnerability tooling, and end-to-end security automation that scale with engineering velocity.

You will drive security by design within agile, cloud-native environments, coordinate with squads on remediation, and help mature our CI/CD security integrations and supply chain controls.

Qualifications

• Minimum 4+ years of overall experience, with at least 2+ years in Application Security or Security Engineering.
• Hands-on engineering role focused on implementing security controls and automation.
• Experience with Secure by Design practices and cloud-native environments.

Responsibilities

• Write detection rules and response playbooks for security monitoring.
• Build and maintain security automation pipelines and tooling.
• Own vulnerability management across SAST/DAST/SCA in cloud and on‑prem environments.
• Implement supply chain security controls and integrate them into engineering workflows.
• Perform RBAC cleanup and manage GitHub org security policies.

Skills

Python

Go

CI/CD

Security tooling

SAST/DAST/SCA

GCP

Kubernetes

RBAC

Education

Bachelor's degree in Computer Science or equivalent

Tools

Jenkins

CircleCI

Cloud Build

Wiz

CodeQL

Vulntools

Job description

PANTHEON is seeking a Security Engineer II to advance our security program across the Pantheon platform. This hands-on role focuses on building detection rules, vulnerability tooling, and end-to-end security automation that scale with engineering velocity.

You will drive security by design within agile, cloud-native environments, coordinate with squads on remediation, and help mature our CI/CD security integrations and supply chain controls.