Senior Security Engineer

Senior Security Engineer 1 

WHO WE ARE:

ActBlue is a nonprofit that builds tech and infrastructure for Democratic campaigns, progressive-aligned causes, and people trying to make an impact in order to fuel long-term, people-powered change. If you’ve ever given online to a Democrat or progressive organization, chances are you’ve used our powerful online fundraising platform.

We put power in the hands of small-dollar donors and help thousands of groups, from presidential candidates to environmental organizations, build grassroots movements. We envision a democracy where everyone looking to make progressive people-powered change can easily and effectively deploy their resources, energy, and creativity to shape our country and futures. Each and every one of us, from the political activists to the tech innovators to the customer service pros, is fully committed to our mission.

THE OPPORTUNITY:                                                                                   

The Security Team at ActBlue works to protect ActBlue from threat actors that might target ActBlue Technical Services (ATS), our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

Security Engineers work in concert with product engineering, platform, and operations engineers within engineering to perform security reviews early in their engineering process. The Senior Security Engineer I will lead offensively-focused ad hoc security reviews, vulnerability assessments, respond to incidents, and detect threats across our tech stack. 

WHAT YOU WILL DO AS A SECURITY ENGINEER:

• Partner closely with engineers to lead security reviews that support our software and infrastructure engineers early in their engineering process.
• Lead vulnerability assessments and offensively-focused ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Lead incident response activities, including investigation, containment, and recovery efforts
• Ideate, implement, iterate and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities, and improving our team’s ability to address potential incidents.

SENIOR SECURITY ENGINEER  QUALIFICATIONS:

• Performs reviews that demonstrate deep domain expertise in the majority of stacks that make up our platform, infrastructure, and business systems. For example, you could lead security reviews for most of the following examples: new deployment patterns in AWS, integrating a new CMS supporting marketing, or developing a new feature helping our donors find candidates that might align with their interests.
• Applies your nuanced understanding of attacker tools, techniques, and processes (TTPs) when performing offensive security reviews and possesses an extensive array of defenses/mitigations for them when performing security reviews to provide requirements to stakeholders. 
• Independently designs, implements detections in our SIEM/SOAR stack to drive for better signal-to-noise or more efficient responses. 
• Serves on our on-call rotation, assists in training other members on on-call response. 
• Builds programs/processes/tech that are structured to measure success in a manner that efficiently furthers security objectives

EXAMPLE STACKS YOU’LL BE WORKING WITH:

• Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis
• Infra stack: Heroku, Amazon Web Services, K8s
• Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot

WHAT YOU BRING:

• Experience with OWASP principles.
• Understanding of modern TTPs used to target B2C online businesses.
• Experience deploying tools that make it easier for engineers to build safely.
• Experience and passion for hunting for vulnerabilities and driving remediations.
• Proficiency in Ruby, JavaScript, and/or Python.

Work Location: This is a full-time, remote, salaried position.

LOCATION AND COMPENSATION: 

This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions. ATS is currently authorized to support remote work employees in Arizona, California, Connecticut, Colorado, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Washington D.C. and Wisconsin.

​​

Salary Range Details:

Salary Range: $157,791 - $170,499 - $183,207

Work Schedule: Our roles predominantly require availability during established business hours (Mon-Fri). Employees in this role are expected to be a part of an on-call rotation which will result in working nontraditional hours as needed.

Travel Requirements: Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions.  

Work Environment: At ActBlue, we are committed to fostering an inclusive and belonging remote-first culture that empowers our diverse workforce to excel in their roles. Employees can expect to work with distributed teams across all U.S. time zones. Our roles require extended technology usage, and proficiency with virtual communication tools such as Zoom and Slack. Regular attendance in virtual meetings is inherent to every position. 

Bargaining Unit: The terms and conditions of this position are subject to a collective bargaining agreement with the Communications Workers of America, the exclusive bargaining agent of covered ActBlue Technical Services employees.

Supervisory Responsibilities: This position has no direct supervisory responsibilities.

—---------------------

ActBlue is committed to consistent compensation practices across our organization.  Final salary offers will take into account factors such as candidate experience, interview performance and current team salary parity. 

BENEFITS:

• Flexible work schedules and an unlimited time-off policy
• Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out-of-pocket expenses and fully-paid short- and long-term disability 
• Fully paid basic and AD&D life insurance and a voluntary supplemental life insurance option
• Dependent and health care flexible spending account options
• Employee Assistance Program (EAP) benefits for employees 
• Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions
• A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)
• Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees
• Additional perks include quarterly snack deliveries and digital subscriptions to the Boston Globe & New York Times

ActBlue is unable to sponsor work visas at this time.

Bargaining Unit position: The terms and conditions of this position are subject to a collective bargaining agreement with the Communications Workers of America, the exclusive bargaining agent of covered ActBlue Technical Services employees.

INCLUSION STATEMENT:

ActBlue is deeply committed to the principle of equal employment opportunity. We commit to retaining, developing, recruiting, and hiring a diverse staff community. We honor the dignity of all. We celebrate their unique qualities. And we recognize the wide range of human differences, backgrounds, and intersectional identities that enrich the workspace and help us better meet our mission. If you feel a connection to our mission and see your interests reflected in this job description, we encourage you to apply - even if you don’t meet every requirement. 

ActBlue is committed to providing reasonable accommodations to individuals with disabilities throughout the interview and employment process, including using our online system to apply for a position. If you would like to request accommodation, please contact us at [email protected] to get started.