Security Engineer II

About Pantheon Pantheon WebOps Platform powers the open web, running more than 300,000 sites in the cloud for customers including Google, Princeton, Salesloft and Doctors Without Borders.

Every day, thousands of developers and marketers create, iterate, and scale WordPress and Drupal sites to reach billions of people globally. Pantheon 's multitenant, container-based platform enables organizations to manage all of their websites from a single dashboard.

Organizations including Clorox and the United Nations drive results through accelerated development and real-time publishing using Pantheon 's collaborative workflows. The Role Pantheon 's Security Engineering team is responsible for safeguarding, auditing, and testing the security of Pantheon 's entire platform.

Our Security Engineering team aims to create a comprehensive and multi-dimensional approach to application security, with a focus on Security by Design in agile software development and cloud native environments. We are seeking a Security Engineer II to join our growing team.

This role bridges execution and tooling — you'll own security domains end-to-end while building the automation and processes that multiply the team's impact across engineering.

This is a hands-on engineering role: you'll write detection rules, build vulnerability management tooling, implement supply chain security controls, and develop the automation pipelines that make security scale.

Our mission is to safeguard, audit, and test the security of the entire cloud hosting platform in these core areas: Security by Design: Implement "Security by Design" within agile software development and cloud-native environments.

Security Tooling & Automation: Build and maintain security tooling and automation that scales the team's impact beyond what manual processes can achieve. Support and Mentorship: Act as a Subject Matter Expert (SME), mentoring and supporting security engineering efforts across the organization.

Standard Setting: Contribute to ap