Job description

About DAT DAT Freight & Analytics is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of freight and logistics innovation for nearly five decades. Founded in 1978, DAT operates the largest freight marketplace in North America — processing 250 million+ load posts annually and maintaining one of the largest repositories of freight market transaction data in the world. On a defined path to $1 billion in revenue, DAT deploys a suite of software solutions, machine learning models, and intelligent automation tools that help brokers, carriers, and shippers price freight accurately, source capacity, reduce risk, and operate more efficiently. With nearly 700 teammates across offices in Denver, CO; Portland, OR; Seattle, WA; Springfield, MO; Toronto, ON; and Bangalore, India, DAT combines the credibility of a multi-decade market leader with the drive of a company that is not done disrupting the industry it helped build. For more information, visit www.DAT.com Job Application Deadline: 10/31/2026 The Opportunity Security Architecture & Engineering (SAE) is the hands-on engineering arm of DAT's Information Security organization, sitting alongside the Security Operations Center (SOC) and Governance, Risk & Compliance (GRC) teams. SAE owns vulnerability management, cloud and network security, product security (AppSec/DevSecOps), and the security tooling that protects DAT's platforms and customer data. It's a small, high-ownership team — you won't be one of dozens of engineers on a rotation; the work you do has direct, visible impact on how quickly DAT can find, fix, and close out real security risk. What You'll Do Vulnerability remediation — own and drive vulnerabilities identified through DAT's scanning and monitoring stack (including GitHub Advanced Security and cloud security tooling) through to closure against defined SLAs. Incident response — participate in the security on-call rotation and serve as a technical responder during active security incidents, following DAT's incident response runbooks. Secure design review — review architecture and feature designs from engineering teams for security risk as part of DAT's Secure Design Review process, before code ships. Security tooling — maintain and improve the tools that make security scale, including WAF, endpoint protection, vulnerability scanning, and SIEM/alerting integrations. Cloud & network security — contribute to ongoing cloud security hardening and Zero Trust network initiatives across DAT's AWS environment. Cross-team partnership — work directly with product and engineering teams to close security exceptions, remediate findings, and build security into their workflows — without owning their roadmap. What You'll Bring 2–4 years of experience in a security engineering, DevSecOps, or closely related infrastructure/engineering role. Working knowledge of cloud security fundamentals, ideally AWS (IAM, network security groups, logging/monitoring). Hands-on experience with vulnerability management tools and processes — finding, triaging, and driving remediation, not just reporting. Comfort reading and writing code or scripts (Python, Bash, or similar) to automate security tooling and workflows. Ability to work cross-functionally with engineering teams and communicate security risk in terms they can act on. Willingness to participate in an on-call rotation for security incidents. Bonus Skills Experience with any of DAT's current security stack: CrowdStrike, GitHub Advanced Security (GHAS), SonarCloud, Cloudflare WAF, Auth0, or Torq. A security certification such as Security+, GSEC, or an AWS security certification. Prior experience on a lean security team where engineers own broad scope rather than a narrow specialty. Familiarity with SOX or similar compliance-driven environments. Why DAT? DAT is an award winning employer of choice. For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We’ve been an employer of choice in the Portland metropolitan area for four decades, and within one year of opening our Denver office, DAT was #26 on Built In Colorado’s 100 Best Places to Work In Colorado. Medical, Dental, Vision, Life, and AD&D insurance Parental Leave Flexible Vacation Time (FVT) An additional 10 holidays of paid time off per calendar year 401k matching (immediately vested) Employee Stock Purchase Plan Short- and Long-term disability sick leave Flexible Spending Accounts Health Savings Accounts Employee Assistance Program Additional programs - Employee Referral, Internal Recognition, and Wellness Free TriMet transit pass (Beaverton Office) Competitive salary and benefits package Work on impactful projects in a cutting-edge environment Collaborative and supportive team culture Opportunity to make a real difference in the trucking industry Employee Resource Groups *This position is not eligible for visa sponsorship** For Washington-based candidates, in compliance with the Washington State Pay Transparency Law, the salary range for this role is $129,000.00 - $165,600.00 + target bonus. DAT considers factors such as scope and responsibilities of the position, candidate's work experience, education and training, core skills, internal equity, and market and business elements when extending an offer. DAT embraces the value of a diverse workforce, and believes it is a core strength of our company that we encourage those values in every DAT employee, at every level of our organization, regardless of tenure or rank. We provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c) #LI-DR1 #LI-hybrid

Requirements

Must-haves

Vulnerability remediation — own and drive vulnerabilities identified through DAT's scanning and monitoring stack (including GitHub Advanced Security and cloud security tooling) through to closure against defined SLAs.
Incident response — participate in the security on-call rotation and serve as a technical responder during active security incidents, following DAT's incident response runbooks.
Secure design review — review architecture and feature designs from engineering teams for security risk as part of DAT's Secure Design Review process, before code ships.
Security tooling — maintain and improve the tools that make security scale, including WAF, endpoint protection, vulnerability scanning, and SIEM/alerting integrations.
Cloud & network security — contribute to ongoing cloud security hardening and Zero Trust network initiatives across DAT's AWS environment.
Cross-team partnership — work directly with product and engineering teams to close security exceptions, remediate findings, and build security into their workflows — without owning their roadmap.
2–4 years of experience in a security engineering, DevSecOps, or closely related infrastructure/engineering role.
Working knowledge of cloud security fundamentals, ideally AWS (IAM, network security groups, logging/monitoring).
Hands-on experience with vulnerability management tools and processes — finding, triaging, and driving remediation, not just reporting.
Comfort reading and writing code or scripts (Python, Bash, or similar) to automate security tooling and workflows.
Ability to work cross-functionally with engineering teams and communicate security risk in terms they can act on.
Willingness to participate in an on-call rotation for security incidents.
Experience with any of DAT's current security stack: CrowdStrike, GitHub Advanced Security (GHAS), SonarCloud, Cloudflare WAF, Auth0, or Torq.
A security certification such as Security+, GSEC, or an AWS security certification.
Prior experience on a lean security team where engineers own broad scope rather than a narrow specialty.
Familiarity with SOX or similar compliance-driven environments.
Why DAT? DAT is an award winning employer of choice.
Medical, Dental, Vision, Life, and AD&D insurance
Flexible Vacation Time (FVT)
Employee Stock Purchase Plan
Short- and Long-term disability sick leave
Flexible Spending Accounts
Health Savings Accounts

Nice-to-haves

Bonus Skills

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

machine learningawspython

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Parental Leave

Wellness