[Remote] Security Engineer II

Note: The job is a remote job and is open to candidates in USA. ActBlue is a nonprofit organization dedicated to creating technology that fuels Democratic victories and enables progressive causes to thrive. The Security Engineer II will work to protect ActBlue from threat actors, respond to incidents, and perform security reviews to enhance the security of their systems. This role involves maintaining security tooling, automating detections, and collaborating with engineers to ensure security throughout the engineering process.ResponsibilitiesMaintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime toolingAutomate detections throughout our tooling stack leveraged to uncover security events and attacks against our systemsImplement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilitiesPerform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilitiesPartner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering processParticipate in incident response activities, including investigation, containment, and recovery effortsSkillsYou get git. You have a working level knowledge of how to manage with your local IDE and CLI, and routinely perform the activities of code committingExperience in automating security workflows and functions for detections patterns utilizing AWS Lambda and Step FunctionsAbility to deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend ActblueAbility to perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)Excellent communication skillsExperience with OWASP principlesExperience deploying tools that make it easier for engineers to build safelyProficiency in Python, Ruby, and/or Go (Preference is ordered)Ability to participate in the team's on call rotationBenefitsFlexible work schedules and an unlimited time-off policyFully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disabilityFully paid basic and AD&D life insurance and a voluntary supplemental life insurance optionDependent and health care flexible spending account optionsEmployee Assistance Program (EAP) benefits for employeesAutomatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributionsA minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employeesAdditional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe & New York TimesCompany OverviewActBlue is nonprofit tech organization that builds fundraising tools for Democratic candidates, progressive causes, and nonprofits. It was founded in 2004, and is headquartered in Somerville, Massachusetts, USA, with a workforce of 201-500 employees. Its website is https://secure.actblue.com/.