Staff Security Engineer, Pantheon
Security Operations
Website operations platform
Be an early applicant
Website operations platform
201-500 employees
Be an early applicant
201-500 employees
Company mission
To make the web a first-class platform that delivers results, one that empowers marketing and development teams to take control of their websites.
Role
Who you are
- 10+ years of experience in information security, with 7+ years focused on security operations — spanning detection engineering, incident response, threat hunting, or SecOps programme leadership
- Deep expertise in architecting and operating enterprise-grade SIEM and SOAR platforms at scale (e.g., Chronicle, Splunk, Elastic SIEM, Palo Alto XSOAR, Tines)
- Strong hands-on background in cloud-native security across GCP and/or AWS — including logging pipelines, cloud security posture management, and IAM monitoring
- Expert-level knowledge of attack techniques and threat actor tradecraft (MITRE ATT&CK, MITRE D3FEND) and the ability to translate that into detection logic and response procedures
- Demonstrated experience leading major incident response — including managing stakeholders, running cross-functional war rooms, and driving post-incident improvement
- Proficiency in scripting and automation (Python, Bash, or equivalent) applied to security engineering problems — not just tooling configuration
- Experience owning or materially contributing to EU regulatory compliance requirements (GDPR, NIS2) from an operational security perspective
- Track record of influencing technical direction beyond your immediate team — through design reviews, architecture documents, or cross-functional programme leadership
- Excellent written and verbal communication skills with the ability to present technical risk clearly to both engineering audiences and executive leadership
- Preferred Experience
- Holding one or more recognized security certifications: CISSP, CISM, GIAC (GCIA, GCED, GREM, GDAT), OSCP, or a cloud security specialty certification (GCP Professional Cloud Security Engineer, AWS Security Specialty)
- Experience building or scaling a detection engineering programme from the ground up, including establishing detection coverage metrics and a continuous improvement cadence
- Hands-on with threat intelligence platforms (e.g., Recorded Future, Mandiant Advantage) and structured intelligence lifecycle management
- Background in abuse monitoring, phishing detection, and takedown coordination with registrars, hosting providers, and law enforcement
- Exposure to bug bounty programme operations and red team/purple team collaboration to validate detection coverage
- Experience managing security vendor relationships, running RFPs, and making build-vs-buy decisions for operational tooling
- Prior experience working within the Irish or EU regulatory environment — familiarity with the Data Protection Commission (DPC), NIS2 obligations for essential/important entities, or ENISA guidance is a plus
What the job involves
- As a Senior Security Engineer, SecOps, you’ll be the backbone of Pantheon’s security operations — designing, implementing, and running the detection and response capabilities that keep our platform and customers safe
- You will lead efforts in threat detection, incident response, and operational resilience, while driving automation and scalable processes to mature Pantheon’s security posture
- This is a hands-on role with leadership expectations: you’ll own key SecOps technologies, shape incident response strategy, and mentor engineers across teams in security best practices
- Pantheon’s core values are Trust, Teamwork, Passion, and Customers First
- We value individuality, humor, and balance, and we actively contribute to open-source communities
- If you’re excited about modern SecOps and thrive on solving complex security problems, this is the place for you
- SecOps Strategy & Roadmap: Define, own, and execute a multi-year roadmap for Pantheon’s security operations capability — covering detection engineering, incident response, threat intelligence, exposure management, and abuse prevention. Translate security risk into prioritised engineering investments
- Architecture & Platform Ownership: Lead the architecture of Pantheon’s SecOps toolchain (SIEM, SOAR, EDR/XDR, cloud security posture, identity monitoring). Evaluate, select, and integrate security platforms with a focus on long-term scalability and operational efficiency
- Threat Detection at Scale: Drive the detection engineering programme — building a library of high-fidelity, low-noise detections mapped to MITRE ATT&CK, tuned across cloud, endpoint, and identity surfaces. Establish the methodology and standards the team operates against
- Incident Response Leadership: Own the incident response programme end-to-end: playbooks, runbooks, severity frameworks, post-incident reviews, and continuous improvement cycles. Lead response for the most complex and critical incidents; serve as technical escalation path for the team
- Threat Intelligence Programme: Build and operate a structured threat intelligence capability — ingesting, contextualising, and operationalising intelligence from internal telemetry, commercial feeds, ISACs, and open-source sources to inform detection and response priorities
- Automation & Engineering Excellence: Architect and deliver scalable automation across alert triage, enrichment, investigation, and response using SOAR, APIs, and scripting. Raise the engineering bar for how SecOps builds and maintains its tooling
- EU Regulatory & Compliance Leadership: Serve as the SecOps subject matter expert for GDPR, NIS2, and relevant EU and Irish regulatory obligations. Partner with GRC and Legal to ensure operational controls satisfy audit, regulatory, and contractual requirements — including SOC 2, PCI DSS, and NIST CSF
- Vulnerability & Exposure Management: Define the programme strategy for vulnerability triage, prioritisation, and remediation SLAs in partnership with Engineering and Infrastructure. Drive down mean time to remediation through automation and clear ownership models
- Abuse & Fraud Prevention: Own the technical strategy for abuse monitoring — credential attacks, account takeover, platform misuse — designing controls that scale with Pantheon’s customer growth
- Business Resilience: Lead SecOps participation in business continuity and disaster recovery planning. Design and run tabletop exercises, red team collaboration, and resilience testing programmes
- Executive Communication: Produce programme-level metrics, risk narratives, and strategic briefings for senior leadership and the board. Translate operational data into business risk language
- Engineering Enablement & Mentorship: Set the technical standard for SecOps practices across Pantheon. Mentor senior and mid-level engineers, run security training programmes, and embed security thinking in engineering teams through pairing, review, and design consultation
Our take
In today's digital landscape, website hosting is a critical component for businesses, and the demand for fast, reliable, and scalable hosting platforms is higher than ever. The competition is fierce, with major players like GoDaddy, Ionos, AWS, and WP Engine dominating the space.
One standout in this crowded market is Pantheon, a leading WebOps platform designed to deliver high-performance hosting for content-driven websites. Pantheon's unique value lies in its ability to provide seamless collaboration between developers and marketers while ensuring fast, reliable website performance. It's a platform that goes beyond traditional hosting by offering powerful tools for managing websites and scaling them as needed - making it a go-to choice for many organisations.
Pantheon has continuously innovated to stay ahead of the competition, with significant investments driving its growth. Initially focused on hosting solutions for WordPress and Drupal websites, it now offers content management as a service. This expansion was bolstered by significant funding, fueling further product development and the introduction of new features like personalisation and analytics. These efforts have reinforced Pantheon's position as a leader in the WebOps and hosting space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-19% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jul 2021
$100m
SERIES E
Mar 2019
$40m
SERIES D
Total funding: $196.8m
Company benefits
- Health & Wellness: Taking care of you and your family is important to us. Our healthcare benefits program delivers choice and value so you can prioritize your health
- Remote & In-Office: We believe in a flexible employee experience, our San Francisco office is a center for collaboration and connection, but it's not the only place this happens
- Flexible Time-Off: We encourage work/life balance. Take time off when you need it, and return ready to make magic on the internet when you're ready and refreshed
- Monthly Book & Gym Allowance: One of the many ways we enable our team to take control of their development and wellness is to take advantage of our books and gym membership allowance
- Promoting Inclusivity: We strive to have a culture where Pantheors across the globe feel a high sense of belonging and engagement. We have several programs in place to help cultivate inclusion at Pantheon, including educational events, open forums, and training opportunities
- Giving Back: We believe in cultivating passion and giving back to the community we live and work in. Pantheon offers a Donation Matching program of $500 per employee and holds multiple team volunteer opportunities throughout the year
- Employee Resource Groups: Our Pantheon Resource Groups (PRGs) allow employees to connect, support each other, and spread awareness
- Professional Development: We support employee learning and development through company led-training, leadership forums, and full access to LinkedIn Learning's catalogue of courses
Company HQ
Chinatown, San Francisco, CA
Leadership
Sameer Kazi
(CEO)Joined Pantheon in 2024 as CEO. They have also served as the Managing Director of Operating Capital since 2015. Previously they were the President of ActiveCampaign and CEO of Cheetah Digital.
Josh Koenig
(Co-Founder & SVP of Marketing)They were part of the team that drove the first high-profile public Drupal use-case with the Howard and Dean campaign in 2003. They then went on to found the Drupal Dojo, an online learning community for developers, and to co-found the premiere Drupal agency in San Francisco, Chapter Three.
David Strauss
(Co-Founder & Advisor)After co-founding Four Kitchens, a successful Web Development shop, they found themselves gravitating away from the customer client work and towards infrastructure solutions. Large clients like NBCUniversal, The Economics, and Wikimedia had already benefited from their scalability and database optimization work.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 23 more jobs at Pantheon