Security Engineer II

Security Engineer II

WHO WE ARE

ActBlue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive. Our vision is simple: building change through the power of people. Since our founding, we’ve been building innovative solutions to revolutionize grassroots fundraising – if you’ve donated to a Democratic campaign or a progressive organization online, you’ve probably used our platform. We believe in putting power in the hands of small-dollar donors by helping thousands of groups — from local candidates to national movements — mobilize their communities and create a lasting impact. Every member of our team is deeply committed to advancing our shared mission and core values. Together, we are shaping the future of democracy.

THE OPPORTUNITY

The Security Team at ActBlue works to protect ActBlue from threat actors that might target ActBlue Technical Services (ATS), our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team. Security Engineers work in concert with product engineering, platform, and operations engineers within engineering to perform security reviews early in their engineering process. The Security Engineer II will respond to incidents, and detect threats across our tech stack, help perform ad hoc security reviews, and work on vulnerability triage.

WHAT YOU WILL DO

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

WHAT YOU BRING

• You get git. You have a working level knowledge of how to manage with your local IDE and CLI, and