Security Engineer

DAT Freight & Analytics is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of freight and logistics innovation for nearly five decades. Founded in 1978, DAT operates the largest freight marketplace in North America — processing 250 million+ load posts annually and maintaining one of the largest repositories of freight market transaction data in the world. On a defined path to $1 billion in revenue, DAT deploys a suite of software solutions, machine learning models, and intelligent automation tools that help brokers, carriers, and shippers price freight accurately, source capacity, reduce risk, and operate more efficiently. With nearly 700 teammates across offices in Denver, CO; Portland, OR; Seattle, WA; Springfield, MO; Toronto, ON; and Bangalore, India, DAT combines the credibility of a multi-decade market leader with the drive of a company that is not done disrupting the industry it helped build. For more information, visit www.DAT.com

Application Deadline: 7/31/2026

The Opportunity

DAT is looking for a Security Engineer to join our security team. This position can be based in Denver Colorado Office. The Security Engineer will join our Security Architecture and Engineering team. As a key member, you’ll own your work end-to-end within a defined scope, contributing to the implementation and adoption of security controls and tooling to improve our security posture. You will collaborate with cross-functional partners to keep work moving and ensure security is embedded into our SDLC. This is a hands-on role that combines engineering, structured problem-solving, and cross-team collaboration.

What You’ll Do

• Apply security architecture principles to defined problems, evaluating design tradeoffs considering security, usability, and operational impact to support secure product innovation.
• Build and maintain automation workflows within the team's toolset, integrating with CI/CD pipelines, logging platforms, and cloud security architecture.
• Independently author runbooks, architecture diagrams, and technical specifications for secure cloud deployments, container hardening, and access management.
• Engage constructively with engineering and product partners to embed security into SDLC and production systems (DevSecOps, IaC scanning, SAST/DAST/SCA, etc.).
• Apply NIST control families and CIA principles to evaluate control coverage, identify gaps within your scope, and apply risk prioritization frameworks consistently.
• Resolve routine security problems independently and assist in incident response, escalating complex issues with relevant context and developing detections for known threat patterns (e.g., MITRE ATT&CK).

• Team player who effectively collaborates across teams and adapts communication style to both technical and non-technical audiences.
• Self-motivated with a growth mindset, applying structured thinking to diagnose problems rather than jumping to solutions.
• Solid organizational skills to manage defined workstreams, coordinate dependencies, and proactively flag risks or blockers to delivery.
• Ability to independently author clear technical documentation and identify gaps in existing processes.
• Ability to handle sensitive and confidential information.
• Working knowledge across multiple security domains, including cloud environments (IAM, network security, posture alignment) and automation via Terraform, CloudFormation, or similar.
• Understanding of frameworks such as NIST 800-53, SOC 2, CIS Benchmarks, and Zero Trust Network Architecture.
• Familiarity with DevSecOps pipelines, containerization (Docker, Kubernetes), and CI/CD security tooling.
• Experience tuning rules to reduce false positives and maintaining cloud-native logging and monitoring frameworks.
• Proven experience (typically 2-4 years) in cybersecurity engineering or infrastructure/cloud security roles.
• B.S. degree in cybersecurity, computer science or related technical field is a plus.
• Relevant foundational or intermediate certifications are a plus (e.g., Security+, AWS Certified Security - Specialty, or equivalent).

DAT is an award winning employer of choice.

For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We’ve been an employer of choice in the Portland metropolitan area for four decades, and within one year of opening our Denver office, DAT was #26 on Built In Colorado’s 100 Best Places to Work In Colorado.

• Medical, Dental, Vision, Life, and AD&D insurance
• Parental Leave
• Flexible Time Off
• An additional 10 holidays of paid time off per calendar year
• 401k matching (immediately vested)
• Employee Stock Purchase Plan
• Short- and Long-term disability sick leave
• Flexible Spending Accounts
• Health Savings Accounts
• Employee Assistance Program
• Additional programs - Employee Referral, Internal Recognition, and Wellness
• Free TriMet transit pass (Beaverton Office)
• Competitive salary and benefits package
• Work on impactful projects in a cutting-edge environment
• Collaborative and supportive team culture
• Opportunity to make a real difference in the trucking industry
• Employee Resource Groups

DAT embraces the value of a diverse workforce, and believes it is a core strength of our company that we encourage those values in every DAT employee, at every level of our organization, regardless of tenure or rank. We provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Equal Opportunity Employer/Protected Veterans/Individuals With Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)