Staff Security Engineer, Pantheon
Security Operations
Website operations platform
Open for applications
Website operations platform
201-500 employees
Open for applications
201-500 employees
Company mission
To make the web a first-class platform that delivers results, one that empowers marketing and development teams to take control of their websites.
Role
Who you are
- The engineers who thrive here come from engineering-shaped backgrounds, people who script, automate, read code, and learn new systems on their feet. and pair that with deep, tested incident response craft
- 8+ years in information security with substantial time in security operations, including demonstrated command of major incidents — you can walk us through your methodology (scoping, severity, containment, communication, post-incident review), not just war stories
- Deep incident response methodology knowledge (NIST 800-61 / SANS PICERL or equivalent, applied in production, not just certified) and a track record of building or materially improving an IR programme: playbooks, severity frameworks, escalation paths, PIR discipline
- Threat hunting and detection craft: expert working knowledge of attacker tradecraft (MITRE ATT&CK) and proven ability to convert hunts and incidents into detection logic and response procedures
- AI fluency: you use AI assistants and LLM tooling in your daily workflow today, and you're excited to apply them to investigation and response. If you can use Claude well, you can help us build ARES
- An engineering mindset: comfortable with Python/Bash scripting, APIs, and cloud-native environments (GCP and/or AWS) — enough to prototype, automate, and hold your own in engineering design discussions. You learn new systems on your feet
- CISSP (or equivalent depth — CISM, GCIH/GCIA/GDAT-class GIAC) demonstrating breadth across the security domains this role touches
- Hands-on experience operating an enterprise SIEM (Google SecOps/Chronicle strongly preferred; Splunk, Sentinel, or Elastic acceptable) at governance level — coverage, log strategy, quality — not just query writing
- Excellent written and verbal communication: you can brief an executive during an incident and write the PIR the team actually learns from
What the job involves
- As a Staff Security Engineer, SecOps, you are the technical anchor of Pantheon's security operations function, and above all, the person we trust to command our hardest incidents. When something serious happens, you set the tempo: scoping, severity, containment strategy, stakeholder communication, and the post-incident work that makes us stronger every time
- This is a staff-level role, which means your impact extends well beyond your own queue. You define the incident response methodology the whole team runs on, you turn every incident and hunt into better detections in partnership with Security Engineering, and you set the direction for what our automation should do next
- We are an AI-forward security team: our SOAR capability already exists inside Google SecOps, and we are building ARES, our AI-assisted incident response platform. We are not hiring you to program SOAR playbooks. We're hiring you to bring the incident judgment that tells ARES what to automate, and the AI fluency to prototype it yourself with tools like Claude
- Command major incidents. Lead response for our most complex and critical incidents end-to-end — data breach scenarios, coordinated attacks, platform-level events. Run the war room, make the severity and containment calls, coordinate Engineering, Legal, and executive stakeholders, and own the blameless post-incident review
- Own incident response methodology. Define and continuously improve the IR programme the team operates against: severity frameworks, escalation paths, playbooks and runbooks, on-call standards, SLAs, and the continuous-improvement loop that follows every incident. You are accountable for how Pantheon responds, not just that it responds
- Drive the hunting → detection feedback loop. Lead hypothesis-driven threat hunting mapped to MITRE ATT&CK across cloud, endpoint, and identity surfaces, and make sure every hunt and every incident feeds back into higher-fidelity, lower-noise detections in partnership with Security Engineering. Establish the methodology and coverage standards the team measures itself by
- Direct AI-assisted automation (ARES). Set the automation roadmap for triage, enrichment, investigation, and response based on what incidents actually demand. Use AI tools (Claude, LLM workflows) daily to prototype, accelerate investigations, and help build ARES, bringing the operator's judgment that turns automation from a demo into a force multiplier
- Govern the SIEM platform. Own governance of Pantheon's Google SecOps (Chronicle) platform - detection coverage, log source strategy, data quality, and cost - while the team handles day-to-day ingestion and connector work. Keep the platform aligned to how we actually detect and respond
- Level up the team. Mentor analysts and engineers through real incidents and hunts - pairing, review, and tabletop exercises. Set the technical bar for how SecOps investigates, documents, and improves
- Communicate up. Translate operational reality into risk narratives and programme-level metrics for senior leadership, and represent SecOps in architectural and product discussions
- Support the broader programme. Contribute operator judgment to threat intelligence priorities, vendor and tooling evaluations, resilience testing and red/purple team exercises, and partner with GRC on operational evidence for SOC 2, GDPR/NIS2, and related obligations
Our take
In today's digital landscape, website hosting is a critical component for businesses, and the demand for fast, reliable, and scalable hosting platforms is higher than ever. The competition is fierce, with major players like GoDaddy, Ionos, AWS, and WP Engine dominating the space.
One standout in this crowded market is Pantheon, a leading WebOps platform designed to deliver high-performance hosting for content-driven websites. Pantheon's unique value lies in its ability to provide seamless collaboration between developers and marketers while ensuring fast, reliable website performance. It's a platform that goes beyond traditional hosting by offering powerful tools for managing websites and scaling them as needed - making it a go-to choice for many organisations.
Pantheon has continuously innovated to stay ahead of the competition, with significant investments driving its growth. Initially focused on hosting solutions for WordPress and Drupal websites, it now offers content management as a service. This expansion was bolstered by significant funding, fueling further product development and the introduction of new features like personalisation and analytics. These efforts have reinforced Pantheon's position as a leader in the WebOps and hosting space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-19% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jul 2021
$100m
SERIES E
Mar 2019
$40m
SERIES D
Total funding: $196.8m
Company benefits
- Health & Wellness: Taking care of you and your family is important to us. Our healthcare benefits program delivers choice and value so you can prioritize your health
- Remote & In-Office: We believe in a flexible employee experience, our San Francisco office is a center for collaboration and connection, but it's not the only place this happens
- Flexible Time-Off: We encourage work/life balance. Take time off when you need it, and return ready to make magic on the internet when you're ready and refreshed
- Monthly Book & Gym Allowance: One of the many ways we enable our team to take control of their development and wellness is to take advantage of our books and gym membership allowance
- Promoting Inclusivity: We strive to have a culture where Pantheors across the globe feel a high sense of belonging and engagement. We have several programs in place to help cultivate inclusion at Pantheon, including educational events, open forums, and training opportunities
- Giving Back: We believe in cultivating passion and giving back to the community we live and work in. Pantheon offers a Donation Matching program of $500 per employee and holds multiple team volunteer opportunities throughout the year
- Employee Resource Groups: Our Pantheon Resource Groups (PRGs) allow employees to connect, support each other, and spread awareness
- Professional Development: We support employee learning and development through company led-training, leadership forums, and full access to LinkedIn Learning's catalogue of courses
Company HQ
Chinatown, San Francisco, CA
Leadership
Sameer Kazi
(CEO)Joined Pantheon in 2024 as CEO. They have also served as the Managing Director of Operating Capital since 2015. Previously they were the President of ActiveCampaign and CEO of Cheetah Digital.
Josh Koenig
(Co-Founder & SVP of Marketing)They were part of the team that drove the first high-profile public Drupal use-case with the Howard and Dean campaign in 2003. They then went on to found the Drupal Dojo, an online learning community for developers, and to co-found the premiere Drupal agency in San Francisco, Chapter Three.
David Strauss
(Co-Founder & Advisor)After co-founding Four Kitchens, a successful Web Development shop, they found themselves gravitating away from the customer client work and towards infrastructure solutions. Large clients like NBCUniversal, The Economics, and Wikimedia had already benefited from their scalability and database optimization work.
Share this job
View 18 more jobs at Pantheon