Security Engineer II

DAT•Seattle, WA

3d•$129,000 - $165,600•Hybrid

About The Position

DAT Freight & Analytics is hiring a Security Engineer II for its Security Architecture & Engineering (SAE) team, the hands-on engineering arm of DAT's Information Security organization. SAE works alongside the Security Operations Center and Governance, Risk & Compliance teams and owns vulnerability management, cloud and network security, product security, and security tooling. This is a small, high-ownership team whose work directly affects how quickly DAT identifies, fixes, and closes security risks. The Security Engineer II will drive vulnerabilities through remediation, participate in security incident response, review engineering designs for security risks, maintain and improve security tools, and contribute to cloud security hardening and Zero Trust network initiatives across DAT's AWS environment. The role partners with product and engineering teams to remediate findings and integrate security into their workflows, without owning those teams' roadmaps. The position has a hybrid work environment and is not eligible for visa sponsorship.

Requirements

2–4 years of experience in a security engineering, DevSecOps, or closely related infrastructure or engineering role.
Working knowledge of cloud security fundamentals, ideally AWS, including IAM, network security groups, and logging/monitoring.
Hands-on experience with vulnerability management tools and processes, including finding, triaging, and driving remediation.
Ability to read and write code or scripts, such as Python or Bash, to automate security tooling and workflows.
Ability to work cross-functionally with engineering teams and communicate security risk in actionable terms.
Willingness to participate in an on-call rotation for security incidents.

Nice To Haves

Experience with one or more of DAT's current security tools: CrowdStrike, GitHub Advanced Security (GHAS), SonarCloud, Cloudflare WAF, Auth0, or Torq.
A security certification such as Security+, GSEC, or an AWS security certification.
Prior experience on a lean security team where engineers own broad scope rather than a narrow specialty.
Familiarity with SOX or similar compliance-driven environments.

Responsibilities

Own and drive vulnerabilities identified through DAT's scanning and monitoring stack, including GitHub Advanced Security and cloud security tooling, through closure against defined SLAs.
Participate in the security on-call rotation and serve as a technical responder during active security incidents, following DAT's incident response runbooks.
Review architecture and feature designs from engineering teams for security risks through DAT's Secure Design Review process before code ships.
Maintain and improve security tools, including WAF, endpoint protection, vulnerability scanning, and SIEM/alerting integrations.
Contribute to cloud security hardening and Zero Trust network initiatives across DAT's AWS environment.
Work directly with product and engineering teams to close security exceptions, remediate findings, and build security into their workflows.