Security Engineer

| USA +80 more | Remote
Employer Provided Salary: 136,611-192,209 Annually
Salary data is provided by the employer. Please note this is not a guarantee of compensation.
Sorry, this job was removed at 9:37 a.m. (CST) on Friday, July 12, 2024
Find out who’s hiring remotely Nationwide
See all Remote jobs Nationwide
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

WHO WE ARE:

ActBlue is a nonprofit that builds tech and infrastructure for Democratic campaigns, progressive-aligned causes, and people trying to make an impact in order to fuel long-term, people-powered change. If you’ve ever given online to a Democrat or progressive organization, chances are you’ve used our powerful online fundraising platform.

We put power in the hands of small-dollar donors and help thousands of groups — from presidential candidates to environmental organizations — build grassroots movements. We envision a democracy where everyone looking to make progressive people-powered change can easily and effectively deploy their resources, energy, and creativity to shape our country and futures. Each and every one of us, from the political activists to the tech innovators to the customer service pros, is fully committed to our mission.

THE OPPORTUNITY: 

The Security Team at ActBlue works to protect ActBlue from threat actors that might target ActBlue Technical Services (ATS), our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

Security Engineers work in concert with product engineering, platform, and operations engineers within engineering to perform security reviews early in their engineering process. We are growing our Security team. We’re actively recruiting for a Senior Security Engineer II and a Security Engineer II to lead and execute offensively-focused ad hoc security reviews, vulnerability assessments, respond to incidents, and detect threats across our tech stack. 

WHAT YOU WILL DO AS A SECURITY ENGINEER:

  • Partner closely with engineers to lead security reviews that support our software and infrastructure engineers early in their engineering process.
  • Lead or execute vulnerability assessments and offensively-focused ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
  • Lead or execute incident response activities, including investigation, containment, and recovery efforts
  • Ideate, implement, iterate and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities, and improving our team’s ability to address potential incidents.

WHAT YOU BRING (SENIOR SECURITY ENGINEER II):

  • Performs reviews that demonstrate deep domain expertise in the full spectrum of stacks that make up our platform, infrastructure, and business systems. For example, you would lead security reviews for new deployment patterns in AWS, integrating a new CMS supporting marketing, or developing a new feature helping our donors find candidates that might align with their interests.
  • Applies deep understanding of attacker tools, techniques, and processes (TTPs) when performing offensive security reviews and possesses an extensive array of defenses/mitigations for them when performing security reviews to provide requirements to stakeholders. 
  • Independently designs, implements, tunes and changes our SIEM/SOAR stack to drive for better detections or more efficient responses. 
  • Serves as a trusted backup on their team for urgent on-call issues, assists in training other members on on-call response. Participates in normal on-call rotations.
  • Builds programs/processes/tech that are structured to measure success in a manner that efficiently furthers security objectives

WHAT YOU BRING (SECURITY ENGINEER II):

  • Can perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)
  • Has experience performing practical information security attacks utilizing popular attacker tools during offensive security reviews, 
  • Can continuously readily learn and apply lessons learned from new attacks/attackers to your area of focus.
  • Can proactively utilizes our SIEM/SOAR tooling to inform work and decisions 
  • Can be a primary SME for our on-call rotation for at least one area of expertise or responsibility
  • Can deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend Actblue.

EXAMPLE STACKS YOU’LL BE WORKING WITH:

  • Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis
  • Infra stack: Heroku, Amazon Web Services, K8s
  • Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot

WHAT YOU BRING:

  • Experience with OWASP principles.
  • Understanding of modern TTPs used to target B2C online business.
  • Experience deploying tools that make it easier for engineers to build safely.
  • Experience and passion for hunting for vulnerabilities and driving remediations.
  • Proficiency in Ruby, JavaScript, and/or Python.

LOCATION AND COMPENSATION: 

This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions. ATS is currently authorized to support remote work employees in Arizona, California, Connecticut, Colorado, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Washington D.C. and Wisconsin.

Salary Range Details:

Senior Security Engineer II: $173,676 - $192,209

Security Engineer II: $136,611 - $151,437

ActBlue is committed to consistent compensation practices across our organization.  Final salary offers will take into account factors such as candidate experience, interview performance and current team salary parity. 

BENEFITS:

  • Flexible work schedules and an unlimited time-off policy
  • Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disability 
  • Fully paid basic and AD&D life insurance and a voluntary supplemental life insurance option
  • Dependent and health care flexible spending account options
  • Employee Assistance Program (EAP) benefits for employees 
  • Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions
  • A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)
  • Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees
  • Additional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe & New York Times

ActBlue is unable to sponsor work visas at this time.

Bargaining Unit position: The terms and conditions of this position are subject to a collective bargaining agreement with the Communications Workers of America, the exclusive bargaining agent of covered ActBlue Technical Services employees.

INCLUSION STATEMENT:

ActBlue is deeply committed to the principle of equal employment opportunity. We commit to retaining, developing, recruiting, and hiring a diverse staff community. We honor the dignity of all. We celebrate their unique qualities. And we recognize the wide range of human differences, backgrounds, and intersectional identities that enrich the workspace and help us better meet our mission. If you feel a connection to our mission and see your interests reflected in this job description we encourage you to apply - even if you don’t meet every requirement. 

ActBlue is committed to providing reasonable accommodations to individuals with disabilities throughout the interview and employment process, including using our online system to apply for a position. If you would like to request an accommodation, please contact us at [email protected] to get started.

*ActBlue will never ask candidates to buy equipment, nor will we email from anything other than an actblue.com or actbluetech.com email address. 

Read Full Job Description
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.
Candidate Location Eligibility:
Albuquerque, NM
Ann Arbor, MI
Atlanta, GA
Austin, TX
Baltimore, MD
Baton Rouge, LA
Birmingham, AL
Boise, ID
Boston, MA
Buffalo, NY
Charleston, SC
Charlotte, NC
Chicago, IL
Cincinnati, OH
Cleveland, OH
Colorado, CO
Columbus, OH
Dallas-Fort Worth, TX
Dayton, OH
Des Moines, IA
Detroit, MI
Fayetteville-Springdale-Rogers, AR
Greensboro, NC
Hampton Roads, VA
Hartford, CT
Houston, TX
Huntsville, AL
Indianapolis, IN
Jacksonville, FL
Kansas City, MO
Las Vegas, NV
Lexington, KY
Lincoln, NE
Little Rock, AR
Los Angeles, CA
Louisville, KY
Madison, WI
Memphis, TN
Miami, FL
Milwaukee, WI
Minneapolis–Saint Paul, MN
Nashville, TN
New Orleans, LA
New York City, NY
Ogden, UT
Oklahoma City, OK
Omaha, NE
Orlando, FL
Other US Location
Palm Bay-Melbourne-Titusville
Pensacola, FL
Peoria, IL
Philadelphia, PA
Phoenix – Mesa – Scottsdale, AZ
Pittsburgh, PA
Portland, ME
Portland, OR
Providence, RI
Provo, UT
Raleigh-Durham, NC
Reno, NV
Richmond, VA
Rochester, NY
Sacramento, CA
Salt Lake City, UT
San Antonio, TX
San Diego, CA
San Francisco, CA
San Luis Obispo, CA
Santa Cruz, CA
Seattle, WA
Spokane, WA
St. Louis, MO
Tallahassee, FL
Tampa Bay, FL
Tucson, AZ
Tulsa, OK
Washington DC
Wichita, KS
Wilmington, NC

Technology we use

  • Engineering
  • Product
  • Sales & Marketing
  • People Operations
    • JavascriptLanguages
    • PythonLanguages
    • RubyLanguages
    • ReactLibraries
    • Node.jsFrameworks
    • Ruby on RailsFrameworks
    • PostgreSQLDatabases
    • AWS (Amazon Web Services)Services
    • LookerAnalytics
    • FigmaDesign
    • MiroDesign
    • AirtableManagement
    • ConfluenceManagement
    • JIRAManagement
    • Monday.comManagement
    • TrelloManagement
    • HubSpotCRM
    • SlackCollaboration
    • ZoomCollaboration
    • Monday.comProject Management

An Insider's view of ActBlue

How would you describe the company’s work-life balance?

ActBlue has incredible work life balance! Unlimited PTO is a lifesaver. I organize outside of work for local elections, mutual aid, & direct action, and sometimes that happens during the workday. Having sufficient time to rest also helps me be more motivated & enjoy work. The culture treats PTO with respect & no one is guilted for taking time off.

Crystal

Data Engineer

What projects are you most excited about?

Our team is in the beginning stages of a Roles and Permissions overhaul for our Campaign and Non-Profit users. We will be adding the ability for these entities to grant varying access levels for different users. We hope this will allow for more users to be added to the platform, while keeping their data secure.

Nate

Senior Software Engineer

How has your career grown since starting at the company?

When I first started at ActBlue in 2019, I didn’t write any code. Thanks to the supportive, mentorship-focused approach within the organization, I was given the space to learn and grow my engineering skill set. I paired regularly with my peers, did coursework, and was empowered to take on projects outside of my comfort zone.

Alli

Senior Product Desginer

How do you empower your team to be more creative?

Fostering creativity starts with trust. I think innovation comes when we give individuals the autonomy to solve problems, not just build prescribed solutions. Our team collaborates early and often, empowers individuals to understand the why instead of just the what, and encourages risk through a culture of learning through iteration.

Ani

Senior Engineering Manager

What are some things you learned at the company?

As a more "seasoned" member of ActBlue, I also appreciate the company's commitment to Diversity and Inclusion. I learn something new almost every single day. Working here is helping me be a better person.

Martin

Engineering Manager, DevOps

What are ActBlue Perks + Benefits

ActBlue Benefits Overview

ActBlue offers generous, competitive compensation, and provides fully paid and trans-inclusive health, dental, and vision insurance and an employer-sponsored 401k contribution plan. ActBlue will also provide the technology and hardware needed to do the job.

Culture
Partners with nonprofits
Open door policy
OKR operational model
Team based strategic planning
Pair programming
Open office floor plan
Flexible work schedule
Remote work program
Diversity
Dedicated diversity and inclusion staff
Mandated unconscious bias training
Diversity employee resource groups
Hiring practices that promote diversity
Health Insurance + Wellness
Flexible Spending Account (FSA)
Disability insurance
Dental insurance
100% employer paid dental insurance
Vision insurance
100% employer paid vision insurance
Health insurance
100% employer paid health insurance
Life insurance
Wellness programs
Mental health benefits
Financial & Retirement
401(K)
401(K) matching
Up to 6% matching and baseline 2% employer contribution
Performance bonus
Child Care & Parental Leave
Childcare benefits
Generous parental leave
12 weeks plus 4 weeks flex time, and an additional week for every year employed.
Family medical leave
Return-to-work program post parental leave
Vacation + Time Off
Unlimited vacation policy
Generous PTO
Paid volunteer time
Paid holidays
Paid sick days
Office Perks
Commuter benefits
Company-sponsored outings
Free snacks and drinks
Onsite office parking
Home-office stipend for remote employees
Professional Development
Job training & conferences
Lunch and learns
Promote from within
Continuing education stipend
All employees are given a $2500 professional development budget annually
Customized development tracks

More Jobs at ActBlue

Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about ActBlueFind similar jobs like this