Security Engineering (w/m)

About Pantheon Pantheon WebOps Platform powers the open web, running more than 300,000 sites in the cloud for customers including Google, Princeton, Salesloft and Doctors Without Borders. Every day, thousands of developers and marketers create, iterate, and scale WordPress and Drupal sites to reach billions of people globally. Pantheon's multitenant, container-based platform enables organizations to manage all of their websites from a single dashboard. The Role Pantheon's Security Engineering team is responsible for safeguarding, auditing, and testing the security of Pantheon's entire platform. Our Security Engineering team aims to create a comprehensive and multi-dimensional approach to application security, with a focus on Security by Design in agile software development and cloud native environments.

This role bridges execution and tooling - you'll own security domains end-to-end while building the automation and processes that multiply the team's impact across engineering. This is a hands-on engineering role: you'll write detection rules, build vulnerability management tooling, implement supply chain security controls, and develop the automation pipelines that make security scale.

Our mission is to safeguard, audit, and test the security of the entire cloud hosting platform in these core areas:

Security by Design: Implement "Security by Design" within agile software development and cloud-native environments.

Security Tooling & Automation: Build and maintain security tooling and automation that scales the team's impact beyond what manual processes can achieve.

Support and Mentorship: Act as a Subject Matter Expert (SME), mentoring and supporting security engineering efforts across the organization.

Contribute to application security policy, process, standards, and guidelines - and build the tooling that enforces them.

Application Security Performance: Help engineering teams design and build high-performing, secure applications by mitigating security issues in a risk-based manner.

Author SIEM detection rules and response playbooks in Chronicle / Google SecOps (YARA-L), expanding coverage across Pantheon's security monitoring surface.

Build and maintain security automation pipelines (Python/Go) - vulnerability management tooling (vulntools, Wiz scripts), GHAS automation, and CI/CD security integrations.

Vulnerability Management: Own vulnerability identification, triage, and remediation coordination with engineering squads across application (SAST/DAST/SCA) and infrastructure layers.

Access & Identity: Execute RBAC cleanup, access architecture implementation, and periodic user access reviews. Manage GitHub org-level security policies and access controls.

Cloud Security: Execute CSPM baseline findings triage, cloud security baseline validation, and data warehouse security implementation (Snowflake).

Define DLP policies and evaluate tooling; execute credential and secrets hygiene programs (plaintext credential remediation in repositories).

What You Need to Succeed Builder Orientation: You measure impact by what you ship - tooling that engineering teams adopt, automation that replaces manual work, detection rules that catch real threats. What You Bring to the Table Overall Experience: Minimum of 4+ years of overall experience, with at least 2+ years dedicated to Application Security or Security Engineering.

Demonstrated experience building security automation - vulnerability management scripts, CI/CD pipeline integrations, detection rules, or similar tooling that engineering teams use in production.

Cloud Proficiency: Experience securing production systems in cloud environments (GCP preferred; AWS or Azure also valuable).

Coding Proficiency: Ability to build maintainable components in Python or Go. You write tools, not just policies.

Hands-on experience with Jenkins, Cloud Build, CircleCI, or similar (bonus points for experience with reusable workflows).

Cloud & Infrastructure: Experience working with containerization (e.g., Security Tooling Platforms: Familiarity with CodeQL, Wiz, or similar platforms is a plus.

Bachelor's degree (preferred) in Computer Science or equivalent practical experience.

Industry competitive compensation and equity plan

Flexible time off, sick days, and 13 paid holidays

Comprehensive medical insurance including Health, Dental and Vision

In-office workspace (San Francisco & Chicago)

Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development

Compensation: CAD $94,000 - 118,0000 annual salary plus bonus and equity

Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact View email address on click.appcast.io to local and federal regulations, Pantheon will consider qualified applicants with arrest and conviction records for employment.

Department of Homeland Security.

To review the Employee and Applicant's Privacy Policy, click here.