DreamHost

Security Engineer

• Investigate and resolve complex security incidents across shared, virtualized, and dedicated Linux hosts
• Scope blast radius, contain compromises, preserve evidence, and produce incident write-ups
• Design and implement safeguards for customer sites, accounts, and infrastructure
• Build malware and webshell signatures and log-based detections while reducing false positives
• Review the security of in-house applications, infrastructure, control plane, customer panel, internal tooling, and third-party/open-source dependencies
• Modernize secrets management by moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets
• Manage identity and access lifecycle, including directory and SSO migration, privileged access reviews, and offboarding
• Drive vulnerability management and patch velocity across a heterogeneous fleet, including end-of-life OS and runtime remediation
• Build automation and tooling for detection, monitoring, response, and operational safety
• Review and govern internal AI and agent tooling for data exposure, permission scope, agent identity, and abuse paths
• Partner with Systems, Development, Abuse, and Support to implement security controls
• Mentor less experienced team members and contribute to shared knowledge and runbooks
• Contribute to security policies, standards, processes, and compliance efforts

Security Engineer II