Security Engineer II

DAT•Seattle, WA

3d•Hybrid

About The Position

DAT Freight & Analytics is a SaaS technology company operating North America's largest freight marketplace. Its Security Architecture & Engineering (SAE) team is the hands-on engineering arm of the Information Security organization, alongside Security Operations Center and Governance, Risk & Compliance teams. SAE is responsible for vulnerability management, cloud and network security, product security (AppSec/DevSecOps), and security tooling that protects DAT's platforms and customer data. This is a small, high-ownership team where engineers have direct impact on finding, fixing, and closing security risks. The Security Engineer II will drive vulnerability remediation through closure against defined SLAs, participate in security incident response and the on-call rotation, review engineering designs for security risk, and maintain and improve security tools. The role also contributes to cloud security hardening and Zero Trust network initiatives in DAT's AWS environment, and partners with product and engineering teams to address security exceptions and findings and incorporate security into their workflows. The role offers a hybrid work environment. It is not eligible for visa sponsorship. For Washington-based candidates, the stated salary range is $129,000 to $165,600, plus target bonus.

Requirements

2–4 years of experience in security engineering, DevSecOps, or a closely related infrastructure or engineering role.
Working knowledge of cloud security fundamentals, ideally AWS, including IAM, network security groups, and logging/monitoring.
Hands-on experience with vulnerability management tools and processes, including finding, triaging, and driving remediation.
Comfort reading and writing code or scripts, such as Python or Bash, to automate security tooling and workflows.
Ability to work cross-functionally with engineering teams and communicate security risks in actionable terms.
Willingness to participate in an on-call rotation for security incidents.

Nice To Haves

Experience with one or more of DAT's current security tools: CrowdStrike, GitHub Advanced Security (GHAS), SonarCloud, Cloudflare WAF, Auth0, or Torq.
A security certification such as Security+, GSEC, or an AWS security certification.
Prior experience on a lean security team where engineers own broad scope rather than a narrow specialty.
Familiarity with SOX or similar compliance-driven environments.

Responsibilities

Own and drive vulnerabilities identified through DAT's scanning and monitoring stack, including GitHub Advanced Security and cloud security tooling, through remediation and closure against defined SLAs.
Participate in the security on-call rotation and act as a technical responder during active security incidents, following incident response runbooks.
Review architecture and feature designs from engineering teams for security risks as part of the Secure Design Review process before code ships.
Maintain and improve security tools, including WAF, endpoint protection, vulnerability scanning, and SIEM/alerting integrations.
Contribute to cloud security hardening and Zero Trust network initiatives across DAT's AWS environment.
Work with product and engineering teams to close security exceptions, remediate findings, and build security into their workflows, without owning their roadmap.