Senior Corporate Security Specialist

WHO WE ARE

Act Blue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive.

Our vision is simple: building change through the power of people. Since our founding, we’ve been building innovative solutions to revolutionize grassroots fundraising – if you’ve donated to a Democratic campaign or a progressive organization online, you’ve probably used our platform! We believe in putting power in the hands of small-dollar donors by helping thousands of groups — from local candidates to national movements — mobilize their communities and create a lasting impact.

Every member of our team is deeply committed to advancing our shared mission and core values. Together, we are shaping the future of democracy.

The Security Team at Act Blue works to protect Act Blue from threat actors that might target Act Blue, our donors, our employees, and the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

Corporate Security is the function responsible for safeguarding Act Blue’s people and information. We run security operations and incident response — including the on-call rotation — own and operate Act Blue’s SIEM and detection stack, secure our email and endpoints, deliver workforce security training and tabletop exercises, produce threat intelligence, and conduct employee investigations and sensitive matter reviews.

Employee investigations and reviews of sensitive matters are core to this function. This is senior-level work requiring independence, discretion, and strict confidentiality, as well as prior experience leading investigations. The role also touches related domains such as AI security, identity, and audit support, in coordination with other security teams.

The Senior Corporate Security Specialist II is an experienced individual contributor who builds and tunes detections that protect Act Blue, independently leads complex security reviews, and serves as a trusted resource for the Security team and its partners. You will report to the Sr. Manager of Security, who sets the direction of the function.

Discretion is a core competency for this role. Sensitive matter reviews are conducted with forensically sound evidence handling, chain-of-custody discipline, and a confidentiality-by-default posture.

• Author, tune, and maintain detections as code in our SIEM/SOAR pipeline — version-controlled, peer-reviewed, tested, and deployed through the detection pipeline
• Identify detection and tooling gaps and propose architecture improvements
• Serve on the on-call rotation and coordinate day-to-day escalations with our third‑party managed SOC, maintaining the detection feedback loop
• Operate email security, endpoint security, and DLP controls; investigate and resolve high‑sensitivity signals and tune controls based on what investigations surface
• Run tabletop exercises, deliver workforce security training, and produce threat intelligence that shapes team priorities
• Restrict, suspend, or revoke an employee’s system access when a review identifies active risk, pending completion of that review
• Define security requirements and detection coverage for identity and audit collection across corporate systems

• Conduct investigations and sensitive matter reviews with forensically sound evidence handling, chain‑of‑custody discipline, and confidentiality by default
• Lead complex reviews independently — employee conduct, insider risk, access misuse, data exfiltration — co‑leading or escalating the most sensitive matters
• Conduct forensic analysis across…