About the role

Role Overview

ActBlue is hiring a Security Engineer II to protect ActBlue Technical Services (ATS), donors, and the campaigns/organizations that fundraise on its platform. The Security Team performs security reviews early in engineers’ development processes, and this role focuses on incident response, threat detection, vulnerability triage, and security automation.

What You Will Do

Maintain and enhance security tooling, including:
- Security log aggregation
- AV
- Development build-time and cloud runtime tooling
Automate detections across the tooling stack to surface security events and attacks
Implement and operate security automation that helps engineers remediate vulnerabilities faster
Conduct vulnerability assessments and ad hoc security reviews to identify and prioritize risks
Partner with engineers to run security reviews early in software and infrastructure development
Participate in incident response (investigation, containment, and recovery)

What You Bring

Working knowledge of git, local IDE/CLI workflows, and routine code committing; ability to peer review and participate in engineering ceremonies
Experience automating security workflows/detections using AWS Lambda and Step Functions
Ability to deploy, manage, monitor, and support operational security capabilities for a subset of systems
Deep understanding of modern TTPs targeting B2C online businesses
Ability to demonstrate deep expertise in one or more security domains (e.g., infrastructure/app security, corporate IT security, security operations) with secondary specializations
Strong communication skills
Experience with OWASP principles
Experience deploying tools that help engineers build safely
Proficiency in Python, Ruby, and/or Go (preference ordered)
Ability to participate in the team on-call rotation

What You’ll Be Working With

Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis
Infra: AWS, Kubernetes (K8s), Terraform
Business systems: Gsuite, Okta, GitHub, Atlassian, NetSuite, Hubspot

Work & Benefits Snapshot

Full-time, remote, salaried role
Limited travel may be required (1–2 times/year) for all-staff/departmental retreats

About ActBlue

ActBlue is a nonprofit technology organization that builds platforms and tools to power Democratic victories and progressive causes. Its solutions support grassroots fundraising, enabling small-dollar donors to mobilize communities and support campaigns and organizations online.

Tags