Senior Security Engineer

About DAT

DAT is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of innovation in transportation supply chain logistics for 45 years. We continue to transform the industry year over year by deploying a suite of software solutions to millions of customers every day - customers who depend on DAT for the most relevant data and most accurate insights to help them make smarter business decisions and run their companies more profitably. We operate the largest marketplace of its kind in North America, with 400 million freights posted in 2022, and a database of $150 billion of annual global shipment market transaction data. Our headquarters are in Denver, CO, with additional offices in Missouri, Oregon, and Bangalore, India. For additional information, see .

Job Application Deadline: 10/30/2024

The Opportunity

DAT is looking for a Senior Security Engineer to join our security team! This position will work remotely in Seattle.

The Senior Security Engineer is responsible for developing, implementing, and maintaining advanced security measures to protect DAT's information systems. This role involves hands-on technical work and strategic oversight to ensure that security policies and procedures are in place and effective. The Senior Security Engineer will collaborate with various teams including but not limited to IT, Product, Engineering, Development, and external vendors to ensure security is integrated into the design of systems and applications. The position requires a deep understanding of security technologies and the ability to stay ahead of emerging threats.

What You'll Do

1. Design, implement, and manage security systems and protocols across the organization.
2. Develop and maintain security architecture standards and processes for enterprise systems.
3. Work closely with the architecture and development teams to ensure security is integrated into infrastructure and applications.
4. Conduct regular security assessments, including vulnerability scans and penetration testing.
5. Analyze security risks and partner with the risk & controls department to develop mitigation strategies.
6. Monitor and respond to security incidents, ensuring quick resolution and minimizing damage.
7. Oversee daily security operations, including monitoring, logging, and incident response.
8. Establish and maintain security tools such as firewalls, intrusion detection/prevention systems, and SIEM solutions.
9. Manage and update security policies, procedures, and best practices based on evolving threats.
10. Lead the incident response team in investigating and responding to security breaches.
11. Perform root cause analysis and implement preventive measures to reduce future risks.
12. Prepare post-incident reports for executive leadership and suggest action plans for improvement.
13. Ensure compliance with industry standards and regulations (e.g., ISO 27001, NIST, GDPR, PCI-DSS).
14. Participate in internal and external security audits and testing, coordinating remediation of findings.
15. Stay current on emerging security laws and regulations and ensure organizational compliance.
16. Serve as a security subject matter expert (SME) in cross-functional projects.
17. Collaborate with IT, DevOps, and product teams to integrate security into development lifecycles (DevSecOps).
18. Stay informed of the latest cybersecurity trends, tools, and threats.
19. Recommend and implement new security solutions as appropriate to ensure protection against emerging risks.
20. Analyze, gather, and communicate key security metrics to measure the effectiveness and overall health of the information security program.
21. Develop dashboards and reports to provide actionable insights to stakeholders, helping guide strategic decisions and continuous improvement of security measures.
22. Participate in security conferences, certifications, and continuing education.
23. Occasional travel for conferences or collaboration with distributed teams.
24. May require availability outside of normal business hours during major security incidents.

The Skills and Experience You'll Bring

1. Minimum of a Bachelor's Degree in Computer Science or related fields or equivalent experience.
2. Applicable industry certifications (e.g., CISSP, Sec+, CISM, SANS GIAC).
3. Minimum of 6 years of experience in Information Security or related fields, with at least 2 years in a senior or lead role.
4. Ability to work closely with cross-functional teams including Engineering & Development, IT, and Product Management.
5. Ability to work collaboratively with senior management across multiple departments.
6. Ability to work effectively in a fast-paced, project-oriented environment.
7. Ability to prioritize and execute tasks while being able to communicate any risks/issues/blockers that would impact original timelines.
8. Ability to handle sensitive and confidential information.
9. Strong analytical, problem-solving, and decision-making skills.
10. Strong verbal and written communication skills.
11. Experience with threat modeling.
12. Experience with evaluating, selecting, implementing, and maintaining security tools (Firewalls, IDS/IPS, EDR, EPP, SIEM, WAF).
13. Experience with agile methodology and working with a ticketing system.
14. Knowledge of security frameworks and standards.
15. Familiarity with vulnerability assessment tools such as Nessus, Burp Suite Pro, etc.
16. Familiarity with cloud security (e.g., AWS, Azure, GCP) and DevSecOps principles.

Bonus Skills

1. Knowledge of the supply chain, logistics, or transportation-specific markets, and its related instruments.
2. Prior experience.
3. Proficiency in programming languages like C++, Java, Python, etc.

Why DAT?

DAT is an award-winning employer of choice. For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We've been an employer of choice in the Portland metropolitan area for four decades, and within one year of opening our Denver office, DAT was #26 on Built In Colorado's 100 Best Places to Work In Colorado.

1. Medical, Dental, Vision, Life, and AD&D insurance.
2. Parental Leave.
3. Up to 20 days of paid time off starting in year one.
4. An additional 10 holidays of paid time off per calendar year.
5. 401k matching (immediately vested).
6. Employee Stock Purchase Plan.
7. Short- and Long-term disability sick leave.
8. Flexible Spending Accounts.
9. Health Savings Accounts.
10. Tuition Reimbursement Program.
11. Employee Assistance Program.
12. Additional programs - Employee Referral, Internal Recognition, and Wellness.
13. Free TriMet transit pass (Beaverton Office).
14. Competitive salary and benefits package.
15. Work on impactful projects in a cutting-edge environment.
16. Collaborative and supportive team culture.
17. Opportunity to make a real difference in the trucking industry.
18. Employee Resource Groups.

This position is not eligible for Visa sponsorship.

For Colorado-based candidates, in compliance with Colorado's Equal Pay for Equal Work Act, the minimum salary for this role is $120,000.00 + benefits. The maximum compensation for this role can vary significantly depending on your job-related skills and experience. DAT considers factors such as scope and responsibilities of the position, candidate's work experience, education and training, core skills, internal equity, and market and business elements when extending an offer.

DAT embraces the value of a diverse workforce, and believes it is a core strength of our company that we encourage those values in every DAT employee, at every level of our organization, regardless of tenure or rank. We provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

#LI-RF1