Security Engineer

**About DAT** DAT Freight & Analytics is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of freight and logistics innovation for nearly five decades. Founded in 1978, DAT operates the largest freight marketplace in North America — processing 250 million+ load posts annually and maintaining one of the largest repositories of freight market transaction data in the world. On a defined path to $1 billion in revenue, DAT deploys a suite of software solutions, machine learning models, and intelligent automation tools that help brokers, carriers, and shippers price freight accurately, source capacity, reduce risk, and operate more efficiently. With nearly 700 teammates across offices in Denver, CO; Portland, OR; Seattle, WA; Springfield, MO; Toronto, ON; and Bangalore, India, DAT combines the credibility of a multi-decade market leader with the drive of a company that is not done disrupting the industry it helped build. For more information, visit http://www.DAT.com * * * **Application Deadline:** 7/31/2026 **The Opportunity** DAT is looking for a Security Engineer to join our security team. This position can be based in Denver Colorado Office. The Security Engineer will join our Security Architecture and Engineering team. As a key member, you’ll own your work end-to-end within a defined scope, contributing to the implementation and adoption of security controls and tooling to improve our security posture. You will collaborate with cross-functional partners to keep work moving and ensure security is embedded into our SDLC. This is a hands-on role that combines engineering, structured problem-solving, and cross-team collaboration. **What You’ll Do** - Apply security architecture principles to defined problems, evaluating design tradeoffs considering security, usability, and operational impact to support secure product innovation. - Build and maintain automation workflows within the team's toolset, integrating with CI/CD pipelines, logging platforms, and cloud security architecture. - Independently author runbooks, architecture diagrams, and technical specifications for secure cloud deployments, container hardening, and access management. - Engage constructively with engineering and product partners to embed security into SDLC and production systems (DevSecOps, IaC scanning, SAST/DAST/SCA, etc.). - Apply NIST control families and CIA principles to evaluate control coverage, identify gaps within your scope, and apply risk prioritization frameworks consistently. - Resolve routine security problems independently and assist in incident response, escalating complex issues with relevant context and developing detections for known threat patterns (e.g., MITRE ATT&CK). **The Skills and Experience You’ll Bring** - Team player who effectively collaborates across teams and adapts communication style to both technical and non-technical audiences. - Self-motivated with a growth mindset, applying structured thinking to diagnose problems rather than jumping to solutions. - Solid organizational skills to manage defined workstreams, coordinate dependencies, and proactively flag risks or blockers to delivery. - Ability to independently author clear technical documentation and identify gaps in existing processes. - Ability to handle sensitive and confidential information. - Working knowledge across multiple security domains, including cloud environments (IAM, network security, posture alignment) and automation via Terraform, CloudFormation, or similar. - Understanding of frameworks such as NIST 800-53, SOC 2, CIS Benchmarks, and Zero Trust Network Architecture. - Familiarity with DevSecOps pipelines, containerization (Docker, Kubernetes), and CI/CD security tooling. - Experience tuning rules to reduce false positives and maintaining cloud-native logging and monitoring frameworks. - Proven experience (typically 2-4 years) in cybersecurity engineering or infrastructure/cloud security role…