Three citizens go about their daily life: one is walking his dog, the second is texting while walking with a guitar case and the last a creating a campaign using the ActBlue Platform
ActBlue Logo

ActBlue

Security Engineer II

Posted Yesterday
Easy Apply
Remote
Hiring Remotely in USA
137K-166K
Mid level
Easy Apply
Remote
Hiring Remotely in USA
137K-166K
Mid level
The Security Engineer II will conduct security reviews, vulnerability assessments, and incident response while collaborating with engineering teams to protect ActBlue from threats.
The summary above was generated by AI

WHO WE ARE

ActBlue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive. 

Our vision is simple: building change through the power of people. Since our founding, we’ve been building innovative solutions to revolutionize grassroots fundraising – if you’ve donated to a Democratic campaign or a progressive organization online, you’ve probably used our platform! We believe in putting power in the hands of small-dollar donors by helping thousands of groups — from local candidates to national movements — mobilize their communities and create a lasting impact. Every member of our team is deeply committed to advancing our shared mission and core values. Together, we are shaping the future of democracy. 


THE OPPORTUNITY

The Security Team at ActBlue works to protect ActBlue from threat actors that might target ActBlue Technical Services (ATS), our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

Security Engineers work in concert with product engineering, platform, and operations engineers within engineering to perform security reviews early in their engineering process. The Security Engineer II will perform offensively-focused ad hoc security reviews, vulnerability assessments, respond to incidents, and detect threats across our tech stack. 


WHAT YOU WILL DO

  • Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
  • Perform vulnerability assessments and offensively-focused ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
  • Participate in incident response activities, including investigation, containment, and recovery efforts
  • Implement, iterate and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities, and improving our team’s ability to address potential incidents

WHAT YOU BRING

  • Can perform reviews that demonstrate deep domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)
  • Has experience performing practical information security attacks utilizing popular attacker tools during offensive security reviews, 
  • Can continuously readily learn and apply lessons learned from new attacks/attackers to your area of focus
  • Can proactively utilizes our SIEM/SOAR tooling to inform work and decisions 
  • Can be a primary SME for our on-call rotation for at least one area of expertise or responsibility
  • Can deploy, manage, monitor, and/or provide sustainable operational support for a subset of technology that our team relies on to enforce security requirements and detect threat actors to defend Actblue
  • Experience with OWASP principles
  • Understanding of modern TTPs used to target B2C online business
  • Experience deploying tools that make it easier for engineers to build safely
  • Experience and passion for hunting for vulnerabilities and driving remediations
  • Proficiency in Ruby, JavaScript, and/or Python

WHAT YOU'LL BE WORKING WITH

  • Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis
  • Infra stack: Heroku, Amazon Web Services, K8s
  • Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot

WORK & BENEFITS SNAPSHOT

This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions. 


Registered States*: Arizona, California, Colorado, Connecticut, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Wisconsin, and Washington D.C.

*While ActBlue is currently registered to support remote work in the states listed above, we possess the ability to register in additional states as needed. If you are located in a state not listed, we may still be able to proceed with your application, but please note that the offer process may take longer to accommodate registration requirements.


Work Schedule: 

This role requires availability during established, regular business hours (Mon-Fri) and is expected to be a part of an on-call rotation which will result in working nontraditional hours as needed.


Work Environment: 

Employees can expect to work with distributed teams across all U.S. time zones. Our roles require extended technology usage, and proficiency with virtual communication tools such as Zoom and Slack. Regular attendance in virtual meetings is inherent to every position.


Salary Range Details:

Salary Range: $136,611 - $151,437 - $166,263

ActBlue is committed to consistent compensation practices across our organization. Final salary offers will take into account factors such as candidate experience, interview performance and current team salary parity. 


Benefits: 

  • Flexible work schedules and an unlimited time-off policy
  • Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disability 
  • Fully paid basic and AD&D life insurance and a voluntary supplemental life insurance option
  • Dependent and health care flexible spending account options
  • Employee Assistance Program (EAP) benefits for employees 
  • Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions
  • A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)
  • Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees
  • Additional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe & New York Times

ActBlue is unable to sponsor work visas at this time.


UNION INFORMATION

The terms and conditions of this position are subject to a collective bargaining agreement with the Communications Workers of America, the exclusive bargaining agent of covered ActBlue Technical Services employees.


BACKGROUND CHECKS

As part of our hiring process, ActBlue will conduct a background check at the time of offer. This will be completed in compliance with applicable laws and will not be initiated without your consent.


INCLUSION STATEMENT FROM ACTBLUE

ActBlue is committed to equal employment opportunities and fostering a diverse, inclusive workplace. We celebrate unique perspectives, honor the dignity of all individuals, and recognize that diverse backgrounds and identities strengthen our mission.

If you’re passionate about our work and see yourself in this role, we encourage you to apply—even if you don’t meet every requirement.

We also provide reasonable accommodations for individuals with disabilities throughout the hiring process and employment. To request an accommodation, email [email protected]

*ActBlue will never ask candidates to buy equipment, nor will we email from anything other than an actblue.com or actbluetech.com email address. 

Top Skills

Atlassian
AWS
Git
Google Suite
Hubspot
JavaScript
Kubernetes
NetSuite
Node.js
Okta
Postgres
Python
React
Redis
Ruby
Ruby On Rails

Similar Jobs at ActBlue

6 Days Ago
Easy Apply
Remote
USA
Easy Apply
113K-171K
Senior level
113K-171K
Senior level
Fintech • Social Impact
Lead and execute organization-wide initiatives, aligning programs with strategic goals, managing cross-functional projects, and ensuring operational excellence.
Top Skills: AirtableSlackZoom
6 Days Ago
Easy Apply
Remote
USA
Easy Apply
174K-211K
Senior level
174K-211K
Senior level
Fintech • Social Impact
As a Senior Software Engineer II, you'll enhance security infrastructure, manage user authentication, collaborate on solutions, and guide technical execution.
Top Skills: BugsnagDatadogEslintGraphQLHerokuJavaScriptKubernetesLookerMixpanelNode.jsPostgresPrettierReactRuby On RailsSidekiqSQLTypescriptWebpackYarn
8 Days Ago
Easy Apply
Remote
USA
Easy Apply
112K-167K
Senior level
112K-167K
Senior level
Fintech • Social Impact
The IT Manager leads the Desktop Support and Systems Administration teams, overseeing IT strategy, operations, team performance, and vendor management within a remote environment.
Top Skills: BashJAMFOktaPythonYubikeys

What you need to know about the Charlotte Tech Scene

Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.

Key Facts About Charlotte Tech

  • Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
  • Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
  • Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
  • Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account