Pantheon Platform

Full-stack Engineer

• Build and evolve Pantheon's unified API: a federated GraphQL supergraph and Go subgraphs serving the Dashboard and public API
• Shape service connectivity through VPC and network architecture, service discovery strategy, and internal traffic standards
• Decompose a large legacy Python monolith into well-bounded services and own the Cassandra data layer, including replication, backup, and disaster recovery
• Design and operate workflow orchestration at platform scale using GCP Workflows, Pub/Sub-driven job execution, and Go services on Cloud Run
• Set GraphQL, gRPC, and REST standards for other engineering teams and serve as a technical resource across the organization
• Own production systems, track health with SLOs, resolve production issues, and balance delivery speed with reliability
• Participate in on-call engineering and alert response rotations
• Raise engineering quality through code review, design feedback, and mentorship

Senior Software Engineer, Connectivity – API Transformation

Security Operations

• Lead end-to-end response for complex and critical incidents, including data breach scenarios, coordinated attacks, and platform-level events
• Run incident war rooms and make severity and containment decisions
• Coordinate Engineering, Legal, and executive stakeholders
• Own blameless post-incident reviews
• Define and continuously improve incident response methodology, including severity frameworks, escalation paths, playbooks, runbooks, on-call standards, SLAs, and continuous improvement
• Lead MITRE ATT&CK-mapped threat hunting across cloud, endpoint, and identity surfaces
• Convert hunts and incidents into higher-fidelity, lower-noise detections and response procedures
• Set the automation roadmap for triage, enrichment, investigation, and response
• Use AI tools and LLM workflows to prototype, accelerate investigations, and help build ARES
• Govern Pantheon’s Google SecOps (Chronicle) platform, including detection coverage, log source strategy, data quality, and cost
• Mentor analysts and engineers through incidents, hunts, pairing, reviews, and tabletop exercises
• Translate operational reality into risk narratives and programme-level metrics for senior leadership
• Represent SecOps in architectural and product discussions
• Contribute to threat intelligence priorities, vendor and tooling evaluations, resilience testing, red/purple team exercises, and GRC evidence for SOC 2, GDPR/NIS2, and related obligations

Staff Security Engineer – Security Operations

Security Engineer

• Implement Security by Design within agile software development and cloud-native environments
• Build and maintain security tooling and automation that scales the security team's impact
• Act as a Subject Matter Expert, mentoring and supporting security engineering efforts across the organization
• Contribute to application security policy, processes, standards, and guidelines, and build tooling that enforces them
• Help engineering teams design and build high-performing, secure applications using risk-based mitigation
• Author SIEM detection rules and response playbooks in Chronicle / Google SecOps using YARA-L
• Build and maintain Python/Go security automation pipelines, vulnerability management tooling, GHAS automation, and CI/CD security integrations
• Own vulnerability identification, triage, and remediation coordination across application and infrastructure layers
• Implement supply chain security controls including Aikido, SLSA, and dependency pinning
• Execute RBAC cleanup, access architecture implementation, user access reviews, and GitHub organization security policies
• Execute CSPM findings triage, cloud security baseline validation, and Snowflake data warehouse security implementation
• Define DLP policies and evaluate tooling; execute credential and secrets hygiene programs

Senior Software Engineer, Connectivity – API Transformation

Staff Security Engineer – Security Operations

Security Engineer II