ActBlue · 13 hours ago
Security Engineer II
ActBlue is a nonprofit organization dedicated to creating technology that fuels Democratic victories and enables progressive causes to thrive. The Security Engineer II will work with the Security Team to protect ActBlue from threat actors, respond to incidents, and enhance security tooling while collaborating closely with product and operations engineers.
Enterprise SoftwareNon ProfitPolitics
Responsibilities
Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling
Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems
Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities
Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
Participate in incident response activities, including investigation, containment, and recovery efforts
Qualification
Required
You get git
You have a working level knowledge of how to manage with your local IDE and CLI, and routinely perform the activities of code committing
You'll be asked to peer review code on the team and are familiar with typical +1 ceremonies
Experience in automating security workflows and functions for detections patterns utilizing AWS Lambda and Step Functions
Ability to deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend Actblue
You'll have a deep understanding of modern TTPs used to target B2C online business
Ability to perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)
You will continuously readily learn and apply lessons learned from new attacks/attackers to your area of focus
Excellent communication skills
Experience with OWASP principles
Experience deploying tools that make it easier for engineers to build safely
Proficiency in Python, Ruby, and/or Go (Preference is ordered)
Ability to participate in the team's on call rotation
Benefits
Flexible work schedules and an unlimited time-off policy
Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disability
Fully paid basic and AD&D life insurance and a voluntary supplemental life insurance option
Dependent and health care flexible spending account options
Employee Assistance Program (EAP) benefits for employees
Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions
A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)
Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees
Additional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe & New York Times
Company
ActBlue
ActBlue is nonprofit tech organization that builds fundraising tools for Democratic candidates, progressive causes, and nonprofits.
Funding
Current Stage
Growth StageTotal Funding
$22M2010-08-28Series A· $22M
Recent News
citybiz
2025-09-19
Company data provided by crunchbase