The Security Team at ActBlue works to protect ActBlue from threat actors that might target ActBlue Technical Services (ATS), our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

Security Engineers work in concert with product engineering, platform, and operations engineers within engineering to perform security reviews early in their engineering process. We are growing our Security team. We’re actively recruiting for a Senior Security Engineer II and a Security Engineer II to lead and execute offensively-focused ad hoc security reviews, vulnerability assessments, respond to incidents, and detect threats across our tech stack.

WHAT YOU WILL DO AS A SECURITY ENGINEER:

  • Partner closely with engineers to lead security reviews that support our software and infrastructure engineers early in their engineering process.
  • Lead or execute vulnerability assessments and offensively-focused ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
  • Lead or execute incident response activities, including investigation, containment, and recovery efforts
  • Ideate, implement, iterate and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities, and improving our team’s ability to address potential incidents.

WHAT YOU BRING (SENIOR SECURITY ENGINEER II):

  • Performs reviews that demonstrate deep domain expertise in the full spectrum of stacks that make up our platform, infrastructure, and business systems. For example, you would lead security reviews for new deployment patterns in AWS, integrating a new CMS supporting marketing, or developing a new feature helping our donors find candidates that might align with their interests.
  • Applies deep understanding of attacker tools, techniques, and processes (TTPs) when performing offensive security reviews and possesses an extensive array of defenses/mitigations for them when performing security reviews to provide requirements to stakeholders.
  • Independently designs, implements, tunes and changes our SIEM/SOAR stack to drive for better detections or more efficient responses.
  • Serves as a trusted backup on their team for urgent on-call issues, assists in training other members on on-call response. Participates in normal on-call rotations.
  • Builds programs/processes/tech that are structured to measure success in a manner that efficiently furthers security objectives

WHAT YOU BRING (SECURITY ENGINEER II):

  • Can perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)
  • Has experience performing practical information security attacks utilizing popular attacker tools during offensive security reviews,
  • Can continuously readily learn and apply lessons learned from new attacks/attackers to your area of focus.
  • Can proactively utilizes our SIEM/SOAR tooling to inform work and decisions
  • Can be a primary SME for our on-call rotation for at least one area of expertise or responsibility
  • Can deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend Actblue.

EXAMPLE STACKS YOU’LL BE WORKING WITH:

  • Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis
  • Infra stack: Heroku, Amazon Web Services, K8s
  • Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot

WHAT YOU BRING:

  • Experience with OWASP principles.
  • Understanding of modern TTPs used to target B2C online business.
  • Experience deploying tools that make it easier for engineers to build safely.
  • Experience and passion for hunting for vulnerabilities and driving remediations.
  • Proficiency in Ruby, JavaScript, and/or Python.

LOCATION AND COMPENSATION: 

This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions. ATS is currently authorized to support remote work employees in Arizona, California, Connecticut, Colorado, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Washington D.C. and Wisconsin.

Salary Range Details:

Senior Security Engineer II: $173,676 – $192,209

Security Engineer II: $136,611 – $151,437

Job Overview
Job alerts

Subscribe to our weekly job alerts below and never miss the latest jobs

Sign in

Sign Up

Forgotten Password

Job Quick Search

Cart

Basket

Share