Security Engineer II

Propio • Overland Park, KS

1d

About The Position

As a Security Engineer II, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio. You will help development teams build secure applications and investigate threats across our environment. You will own assigned security reviews, investigations, and technical improvements with minimal oversight, working closely with Platform Engineering, DevOps, and IT. You will escalate major incidents and risk decisions to security leadership.

Requirements

• 5+ years of IT, software engineering, or information security experience, or an equivalent combination of education and relevant experience.
• Hands-on experience assessing applications for security weaknesses and investigating security alerts or incidents.
• Working knowledge of common web and API vulnerabilities, including access control, injection, authentication, and configuration issues, with the ability to recommend and validate fixes.
• Ability to review code in at least one programming language and develop scripts in Python, PowerShell, Bash, or a similar language.
• Experience with Git, CI/CD pipelines, and security testing tools, including SAST, DAST, dependency scanning, and secret detection.
• Experience using SIEM platforms and endpoint, identity, or cloud telemetry to investigate threats, with an understanding of incident containment and evidence preservation.
• Solid understanding of HTTP, TLS, DNS, networking, and Windows or Linux systems, and their role in application security and incident investigations.
• Strong troubleshooting, prioritization, and cross-functional collaboration skills, with the ability to clearly communicate technical findings verbally and in writing.

Nice To Haves

• Experience securing cloud applications, including IAM, containers, secrets management, and infrastructure as code.
• Familiarity with OAuth 2.0, OpenID Connect, SAML, and security considerations for multitenant applications.
• Experience improving detection coverage, automating response workflows, or supporting threat hunting and incident response exercises.
• Familiarity with protecting sensitive healthcare data and supporting HIPAA-related security requirements.
• Relevant certifications such as GWEB, GWAPT, GCIH, GCIA, Security+, or equivalent demonstrated practical skills.

Responsibilities

• Review application designs, code changes, APIs, and integrations for security risks; recommend fixes and contribute to threat modeling for new features and major changes.
• Conduct targeted security testing of web applications and APIs, including authentication, authorization, session management, input validation, and sensitive data protection.
• Integrate and tune code, dependency, and secret scanning within CI/CD pipelines; validate findings, reduce false positives, and support developer remediation.
• Prioritize vulnerabilities based on exploitability, exposure, and business impact; track remediation, retest fixes, and escalate overdue high-risk issues.
• Coordinate penetration tests and remediation efforts; translate recurring findings into secure coding guidance and repeatable development practices.
• Triage and investigate alerts across applications, endpoints, identity, email, cloud, and network environments, distinguishing suspicious activity from expected behavior.
• Correlate logs and evidence to determine incident scope, impacted accounts and systems, timelines, and root cause while preserving evidence and documenting actions.
• Coordinate containment, eradication, and recovery with system owners under established procedures; escalate high-impact incidents and potentially disruptive actions.
• Deliver clear incident updates covering confirmed findings, uncertainties, business impact, and next steps; maintain accurate case documentation.
• Leverage incident findings to improve detections, logging, and response playbooks; participate in post-incident reviews and track corrective actions.
• Develop scripts and automation to reduce repetitive investigation and vulnerability management tasks, validating changes before deployment.
• Implement security tools and process improvements; share investigative techniques and help analysts strengthen triage, documentation, and escalation practices.

Benefits

• Opportunities to learn, develop, and expand your capabilities while building a meaningful career.
• Opportunity to make a real difference.
• Encouragement of curiosity, creativity, and challenging the way things have always been done.
• Room to grow and support to get there.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed