--- title: 'Security Engineer II at Pantheon Systems, Inc' canonical: 'https://feeny.ai/job/security-engineer-ii-pantheon-systems-inc-canada-bmnkxwrhv8w5' type: 'job' last_seen: '2026-10-14' --- # Security Engineer II at Pantheon Systems, Inc - **Company:** Pantheon Systems, Inc - **Location:** Canada - **Work type:** remote - **Posted:** 2026-09-24 - **Last confirmed live:** 2026-10-14 - **Apply:** https://pantheon.io/about/careers/detail?gh_jid=8231981 ## Job description ## About Pantheon Pantheon WebOps Platform powers the open web, running more than 300,000 sites in the cloud for customers including Google, Princeton, Salesloft and Doctors Without Borders. Every day, thousands of developers and marketers create, iterate, and scale WordPress and Drupal sites to reach billions of people globally. Pantheon's multitenant, container-based platform enables organizations to manage all of their websites from a single dashboard. Organizations including Clorox and the United Nations drive results through accelerated development and real-time publishing using Pantheon's collaborative workflows. ## The Role Pantheon's Security Engineering team is responsible for safeguarding, auditing, and testing the security of Pantheon's entire platform. Our Security Engineering team aims to create a comprehensive and multi-dimensional approach to application security, with a focus on Security by Design in agile software development and cloud native environments. We are seeking a Security Engineer II to join our growing team. This role bridges execution and tooling — you'll own security domains end-to-end while building the automation and processes that multiply the team's impact across engineering. This is a hands-on engineering role: you'll write detection rules, build vulnerability management tooling, implement supply chain security controls, and develop the automation pipelines that make security scale. Our mission is to safeguard, audit, and test the security of the entire cloud hosting platform in these core areas: - Security by Design: Implement "Security by Design" within agile software development and cloud-native environments. - Security Tooling & Automation: Build and maintain security tooling and automation that scales the team's impact beyond what manual processes can achieve. - Support and Mentorship: Act as a Subject Matter Expert (SME), mentoring and supporting security engineering efforts across the organization. - Standard Setting: Contribute to application security policy, process, standards, and guidelines — and build the tooling that enforces them. - Application Security Performance: Help engineering teams design and build high-performing, secure applications by mitigating security issues in a risk-based manner. ## What You Will Do - Detection Engineering: Author SIEM detection rules and response playbooks in Chronicle / Google SecOps (YARA-L), expanding coverage across Pantheon's security monitoring surface. - Security Tooling Development: Build and maintain security automation pipelines (Python/Go) — vulnerability management tooling (vulntools, Wiz scripts), GHAS automation, and CI/CD security integrations. - Vulnerability Management: Own vulnerability identification, triage, and remediation coordination with engineering squads across application (SAST/DAST/SCA) and infrastructure layers. - Supply Chain Security: Implement supply chain security controls (Aikido, SLSA, dependency pinning) and integrate them into engineering workflows. - Access & Identity: Execute RBAC cleanup, access architecture implementation, and periodic user access reviews. Manage GitHub org-level security policies and access controls. - Cloud Security: Execute CSPM baseline findings triage, cloud security baseline validation, and data warehouse security implementation (Snowflake). - DLP & Secrets: Define DLP policies and evaluate tooling; execute credential and secrets hygiene programs (plaintext credential remediation in repositories). ## What You Need to Succeed - Builder Orientation: You measure impact by what you ship — tooling that engineering teams adopt, automation that replaces manual work, detection rules that catch real threats. Not by tickets closed or alerts triaged. - Communication: Strong communication skills essential for partnering with engineering teams across the organization. You advocate for security priorities and tradeoffs across functions without being prompted. - Commitment: Demonstrated commitment to teamwork, professionalism, and authenticity, fostering trust and accountability. - Grit: Understanding that establishing security best practices is a marathon requiring persistence across many stakeholders. ## What You Bring to the Table - Overall Experience: Minimum of 4+ years of overall experience, with at least 2+ years dedicated to Application Security or Security Engineering. - Security Tooling: Demonstrated experience building security automation — vulnerability management scripts, CI/CD pipeline integrations, detection rules, or similar tooling that engineering teams use in production. - Development Practices: Hands-on experience with Secure by Design development practices, including participating in security architecture and design reviews. - Cloud Proficiency: Experience securing production systems in cloud environments (GCP preferred; AWS or Azure also valuable). - Coding Proficiency: Ability to build maintainable components in Python or Go. You write tools, not just policies. - CI/CD Fundamentals: Hands-on experience with Jenkins, Cloud Build, CircleCI, or similar (bonus points for experience with reusable workflows). - Cloud & Infrastructure: Experience working with containerization (e.g., Docker, OCI), Terraform, and Kubernetes (K8s). - Security Tooling Platforms: Experience with SAST/DAST/SCA/CSPM tools. Familiarity with CodeQL, Wiz, or similar platforms is a plus. - Education: Bachelor's degree (preferred) in Computer Science or equivalent practical experience. ## What We Offer We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team. - Industry competitive compensation and equity plan - Flexible time off, sick days, and 13 paid holidays - Comprehensive medical insurance including Health, Dental and Vision - Paid parental leave (plus fertility, adoption and other family planning benefits) - In-office workspace (San Francisco & Chicago) - Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development - Events and activities both team-based and company wide that inspire, educate and cultivate Compensation: CAD $94,000 - 118,0000 annual salary plus bonus and equity Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact talent@pantheon.io. Pursuant to local and federal regulations, Pantheon will consider qualified applicants with arrest and conviction records for employment. After an offer is made and accepted, E-verify will be utilized to establish your identity and employment eligibility as required by the U.S. Department of Homeland Security. To review the Employee and Applicant's Privacy Policy, click[here](https://pantheon.pactsafe.io/employeeandapplicantprivacy.html). Visa Sponsorship is not available at this time. ## About Pantheon Systems, Inc ## Company Overview - **One-liner**: Pantheon provides a WebOps platform that unifies web infrastructure, workflows, and governance for building, hosting, and managing Drupal and WordPress websites at scale. - **Entity Type**: Private (Venture Capital-Backed; Series E) - **Headquarters**: San Francisco, California, United States - **Founded**: 2010 - **Founders**: Josh Koenig, Matt Cheney, David Moffly, and others (early team from the Drupal and WordPress ecosystem) ## Core Business - Primary industry/industries: Web Operations (WebOps) Platform, Managed Web Hosting, Cloud Infrastructure for Content Management Systems (CMS) - Target customers: B2B, primarily serving Enterprise and mid-market organizations, including universities, government agencies, technology companies, and major consumer brands. Also serves digital agencies building and managing client sites. - Mission or purpose statement: To empower teams to build, scale, and deliver exceptional digital experiences by streamlining WebOps, allowing them to focus on creating engaging content rather than managing infrastructure. ## Products & Services - **[Pantheon Platform]**: The core SaaS platform that provides a unified workflow for development, hosting, security, and performance management for Drupal and WordPress sites. It includes features like multidev environments, automated backups, a global CDN, and a serverless CMS architecture. - **[Autopilot]**: An automated governance and update tool that applies security patches, core updates, and plugin updates across a portfolio of websites, reducing manual maintenance and security risks. - **[Global CDN (Content Delivery Network)]**: A high-performance, globally distributed network designed to accelerate page load times and handle massive traffic spikes (over 17 billion monthly page views). - **[Professional Services & Support]**: Includes onboarding, migration services, and 24/7 support for enterprise customers. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed for the last round; previous reports suggested a valuation around $1 billion (unicorn status) after the Series E round. - **Key Metric**: Total Funding: $196.8M raised. - **Notable Investors/Partners**: SoftBank, Foundry Group, Scale Venture Partners, Industry Ventures, Sageview Capital, and others (backers of Heroku, ExactTarget, and SendGrid). Partners with major digital agencies and technology providers. - **Growth Signals**: Hosts over 700,000 websites and serves 2,500+ agency partners. Employs approximately 525 people (as of 2026). Processes over 17 billion monthly page views for its customers. Continues to expand its platform capabilities with AI and serverless features. ## Competitive Advantages - **Single, Integrated Platform**: Unlike competitors that require stitching together separate hosting, security, and workflow tools, Pantheon offers a unified platform for the entire web lifecycle. - **Deep CMS Specialization**: Built exclusively for Drupal and WordPress, offering unparalleled performance and workflow optimizations for these open-source ecosystems. - **Developer-Centric Workflow**: Features like multidev environments and Git-based deployments are designed to appeal to engineering teams, reducing friction between developers and marketers. - **Scale and Reliability**: Proven infrastructure capable of handling massive traffic for major global brands (e.g., Tableau, LA Tourism). ## Strategic Focus - **AI and Automation**: Integrating AI into the platform to automate routine WebOps tasks, including content updates, security patching, and performance optimization. - **Serverless CMS**: Pushing the boundaries of serverless architecture for CMS to improve scalability and reduce hosting costs for customers. - **Enterprise Expansion**: Continuing to win large, complex organizations in regulated industries (education, government, healthcare) that require robust security and compliance features. - **Community Growth**: Deepening its ecosystem of agency partners and open-source contributors to drive platform adoption and innovation. ## Why Work Here - **Culture & Values**: Emphasizes a culture of "teamwork, passion, and customer first." The company is described as having a diverse and passionate team that is "unafraid to think differently." - **Remote/Hybrid Policy**: Supports a flexible employee experience. The San Francisco office is a hub for collaboration, but remote work is embraced. The company has offices in 4 countries. - **Benefits & Perks**: - **Paid Parental Leave**: Up to 8 weeks of paid leave for bonding with a new child. - **Family Planning Support**: Comprehensive coverage including abortive care, travel reimbursements for family planning, and support for the transgender community (gender reassignment services). - **Health & Wellness**: Comprehensive healthcare benefits, mental health coverage, and a monthly book and gym allowance. - **Professional Development**: Access to LinkedIn Learning, company-led training, and leadership forums. - **Giving Back**: Employee donation matching program ($500/year) and team volunteer opportunities. - **Flexible Time-Off**: Encourages work/life balance with a flexible PTO policy. - **Inclusivity**: Active Employee Resource Groups (PRGs) and a stated commitment to diversity and inclusion. - **Engineering Culture**: A focus on building a "world-class WebOps Platform" using modern technologies. Engineers work on challenging problems at scale (billions of monthly page views). ## Sources 1. [pantheon.io](https://pantheon.io/about) 2. [pantheon.io](https://pantheon.io/about/careers) 3. [pantheon.io](https://pantheon.io/about/careers/openings) 4. [cbinsights.com](https://www.cbinsights.com/company/pantheon-systems) 5. [pitchbook.com](https://pitchbook.com/profiles/company/52913-26) ## Other roles at Pantheon Systems, Inc - [Senior Software Engineer, Connectivity & API Transformation](https://feeny.ai/job/senior-software-engineer-connectivity-api-transformation-pantheon-systems-inc-rghp65gys6zv) — United States - [Staff Software Engineer, Platform Infrastructure](https://feeny.ai/job/staff-software-engineer-platform-infrastructure-pantheon-systems-inc-ireland-6x9wj3xz94jb) — Ireland - [Enterprise Account Executive](https://feeny.ai/job/enterprise-account-executive-pantheon-systems-inc-united-states-0y6dnfpzgpre) — United States - [Principal Software Engineer, Collaborative Web Platform](https://feeny.ai/job/principal-software-engineer-collaborative-web-platform-pantheon-systems-inc-cehwejpn4b6v) — Canada - [Principal Software Engineer, Collaborative Web Platform](https://feeny.ai/job/principal-software-engineer-collaborative-web-platform-pantheon-systems-inc-1agbn1bzjqrf) — United States - [Sales Engineer](https://feeny.ai/job/sales-engineer-pantheon-systems-inc-united-states-as2qgjgnnmkn) — United States - [Senior Engineering Manager, Customer Runtimes](https://feeny.ai/job/senior-engineering-manager-customer-runtimes-pantheon-systems-inc-united-states-dze1k43xe8qq) — United States - [Senior Engineering Manager, Customer Runtimes](https://feeny.ai/job/senior-engineering-manager-customer-runtimes-pantheon-systems-inc-canada-0mpdk1t3zmr7) — Canada, United States - [Software Engineer II - Collaborative Web Platform](https://feeny.ai/job/software-engineer-ii-collaborative-web-platform-pantheon-systems-inc-canada-5dfjqw7kd8mg) — Canada - [Staff Security Engineer - Security Operations](https://feeny.ai/job/staff-security-engineer-security-operations-pantheon-systems-inc-united-kingdom-gdmb39dkptrb) — United Kingdom