Security Engineer II

ActBlue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive. The Security Engineer II will work with the Security Team to protect ActBlue from threat actors, responding to incidents, detecting threats, and performing security reviews to enhance the organization's security posture.

Responsibilities:

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Requirements:

• You get git. You have a working level knowledge of how to manage with your local IDE and CLI, and routinely perform the activities of code committing
• Experience in automating security workflows and functions for detections patterns utilizing AWS Lambda and Step Functions
• Ability to deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend Actblue
• Ability to perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)
• Excellent communication skills
• Experience with OWASP principles
• Experience deploying tools that make it easier for engineers to build safely
• Proficiency in Python, Ruby, and/or Go (Preference is ordered)
• Ability to participate in the team's on call rotation