Security Engineer II

About the role

The team is small and each engineer runs their own workstreams from start to finish, working alongside systems, development, abuse and support staff. Good work means fewer false alarms and less long-term risk at fleet scale.

At a glance

What you will do

• Investigate compromises on shared, virtual and dedicated Linux hosts, scope the damage, contain it and write it up
• Build malware and webshell signatures and log-based detections, and cut false positives that wear the team down
• Review the security of in-house control panels and internal tools, plus third-party and open-source code
• Move static credentials into Vault, adopt dynamic credentials and remove plaintext secrets from code, logs and CI
• Automate any manual task done more than twice, and review AI and agent tooling for data exposure and abuse paths

What they look for

• Hands-on experience with security engineering in a multi-tenant Linux environment where untrusted code runs
• Incident response skills: containment, evidence handling and clear written reports
• Knowledge of secrets management, identity and access lifecycle, and vulnerability management at scale
• Ability to work without waiting for permission and to partner directly with other technical teams

Benefits

• Full health, vision and dental for the whole family at no cost
• 3% Safe Harbor 401(k) contribution plus up to 1% match
• Profit sharing and bonus opportunities
• 15 vacation days to start, 11 paid holidays and 80 hours of sick leave
• Tuition reimbursement, pet insurance and a monthly wellness allowance