Security Engineer II – California, US (Remote)

Benefits Offered

• Full health/vision/dental for the entire family atzerocost to team member

• 3% Safe Harbor contributed to 401(k) plus up to 1% employer match

• Opportunities for profit sharing and bonuses

• Generous time-off (starting at 15 vacation days)

• 11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)

• Paid sick leave (80 hours accrued)

• Tuition reimbursement (50/50 up to a specific amount)

• Pet Insurance

• Thrive Pass wellness allowance of $30 per month

• Udemy online learning courses

• Disability Insurance

• Generous maternity/paternity leave

• Discounted personal travel through corporate booking program Egencia

• Laid-back atmosphere

• Fun monthly company events

• Free web hosting

Overview

The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.

You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.

What you’ll work on

• Incident response across shared, virtualized, and dedicated Linux hosts – compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.

• Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.

• Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.

• Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.

• Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.

• Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.

• Automation. Anything done manually more than twice is a candidate for tooling, and you’ll build it.

• Security review and governance of AI and agent tooling as it’s adopted internally – data exposure, permission scope, agent identity, and abuse paths. You’ll also be using these tools heavily yourself; the team runs on them.

Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.

• Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.

• Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.

• Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.

• Build automation and tooling that improves detection, monitoring, response, and operational safety.

• Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.

• Mentor less experienced team members and contribute to the team’s shared knowledge and runbooks.

• Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.