Job description

Senior Security Engineer Own Your Impact. At Propio, we don't believe careers happen to people. We believe people create them. Here, you're trusted to make decisions, challenge assumptions, drive innovation, and shape outcomes. Your success is not limited by hierarchy or tenure. It's fueled by your ambition, your curiosity, and your willingness to own your impact. If you're looking for a role where you can simply maintain the status quo, this probably isn't it, but if you're looking for a place where your ideas matter, your growth is accelerated, and your work creates meaningful impact across the world, we'd love to talk. Why Propio? Every day, communication changes lives. A patient receives care they otherwise couldn't access. A family gains critical information. A business connects with a customer. A community becomes more inclusive. These moments happen because barriers are removed. And behind those moments are Propio team members who show up every day to solve problems, innovate, and build the future. This isn't just work. This is world impact. As a Senior Security Engineer, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio. You'll be empowered to: • Take ownership of important initiatives and outcomes. • Drive meaningful business results. • Influence decisions and contribute new ideas. • Partner with talented, high-performing team members. • Challenge yourself through continuous learning and growth. • Help shape the future of a rapidly growing organization. What You'll Own The Sr Security Engineer will be a key member of the Information Security department, responsible for performing cybersecurity risk mitigation activities and ensuring the security of Propio's infrastructure. This role involves leveraging industry-leading technologies to identify and respond to threats, conducting analysis of security-related data, and providing incident response support with minimal oversight and may direct other resources when engaged in larger efforts, when required. This role is a DevSecOps Engineer at its core. Cloud Security • Lead the evaluation and implementation of new cloud security tools and processes to enable a secure cloud architecture (strong background in AWS is required) • Develop and automate cloud security controls to identify and mitigate security threats and violations, including proactive identification of security risks • Support evidence collection from cloud security controls to support compliance efforts • Proactively work with other departments to remediate critical security vulnerabilities and resolve complex security problems often requiring additional research • Work with engineering teams to secure the automated build, test, and deployment processes of our CI/CD pipeline and Infrastructure as Code. Application Security • Ensure security is integrated into software development through use of key tools such as SAST, DAST, SCA, threat modeling, API security, and vulnerability scanners. • Evaluate vulnerabilities using threat intelligence, exploitability, asset criticality, and business impact to provide risk-based recommendations and support informed decision-making • Partner with technology departments to drive remediation efforts, including the use of artificial intelligence, where approved, to speed up mean time to remediate • Advance the vulnerability management strategy and automation capabilities to meet the challenges of the evolving threat landscape Incident Response • Analyze logs from various security controls, including firewalls, proxies, intrusion prevention systems, and endpoint security solutions, to detect potential threats • Safely acquire and preserve data integrity for cyber incident analysis, determining the technical and operational impact, root causes, and scope of incidents • Provide escalated incident response support, as needed, including analysis of security alerts and communication with stakeholders • Liaise with IT teams during incident response and alert triaging, as well as with other internal or external stakeholders, when directed, during remediation scenarios What Makes Someone Successful Here The most successful people at Propio aren't necessarily the ones with the longest resumes. They're the people who: • Take ownership instead of waiting for direction. • Embrace challenges as opportunities to grow. • Continuously seek better ways of working. • Turn ideas into action. • Hold themselves and others accountable to high standards. • Are driven by making a measurable impact. Requirements What You'll Bring Required Qualifications • 12+ years of IT and/or information security work experience, including administration, analysis, or engineering roles; or combination of experience and relevant education, such as a bachelor's degree in computer science or information assurance • Relevant IT security certification is highly desirable, such as CompTIA A+, CompTIA Network+, GIAC Security Essentials, CISSP, and/or CCSP. • Strong knowledge of various security methodologies, processes, and technical solutions such as SIEM, IDS/IPS, Firewall Solutions, and Offensive Security tools • Experienced with HIPAA-specific security requirements • Advanced understanding of network concepts (DHCP, DNS, VLANs, etc.) • Successfully performed in senior DevSecOps role • Ability to think critically and logically under pressure and work in a fast-paced environment • Ability to lead others on technical and administrative tasks • Strong technical experience with a proven history of troubleshooting complex problems across different segments, offices, and teams • Ability to mentor less experienced personnel to learn and grow professionally Even if your experience doesn't perfectly match every qualification, we encourage you to apply. We're looking for potential, drive, and a commitment to growth as much as experience. What You'll Gain Own Your Growth: We invest in people who invest in themselves. You'll have opportunities to learn, develop, and expand your capabilities while building a meaningful career. Own Your Impact: You'll see the connection between your work and our success. We believe great people deserve the opportunity to make a real difference. Own Your Innovation: The best ideas can come from anywhere. We encourage curiosity, creativity, and challenging the way things have always been done. Own Your Success: Whether you're building expertise, pursuing leadership opportunities, or expanding your career path, we'll give you room to grow and the support to get there. At Propio, your work doesn't just move a company forward. It helps connect people, communities, and opportunities across the world. Ready to Build Something Bigger? Apply today and discover what happens when you own your success.

Requirements

Must-haves

Senior Security Engineer
Own Your Impact. At Propio, we don't believe careers happen to people. We believe people create them.
As a Senior Security Engineer, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio.
Take ownership of important initiatives and outcomes.
Drive meaningful business results.
Influence decisions and contribute new ideas.
Partner with talented, high-performing team members.
Challenge yourself through continuous learning and growth.
Help shape the future of a rapidly growing organization.
What You'll Own
Cloud Security
Lead the evaluation and implementation of new cloud security tools and processes to enable a secure cloud architecture (strong background in AWS is required)
Develop and automate cloud security controls to identify and mitigate security threats and violations, including proactive identification of security risks
Support evidence collection from cloud security controls to support compliance efforts
Proactively work with other departments to remediate critical security vulnerabilities and resolve complex security problems often requiring additional research
Work with engineering teams to secure the automated build, test, and deployment processes of our CI/CD pipeline and Infrastructure as Code.
Application Security
Ensure security is integrated into software development through use of key tools such as SAST, DAST, SCA, threat modeling, API security, and vulnerability scanners.
Evaluate vulnerabilities using threat intelligence, exploitability, asset criticality, and business impact to provide risk-based recommendations and support informed decision-making
Partner with technology departments to drive remediation efforts, including the use of artificial intelligence, where approved, to speed up mean time to remediate
Advance the vulnerability management strategy and automation capabilities to meet the challenges of the evolving threat landscape
Incident Response
Analyze logs from various security controls, including firewalls, proxies, intrusion prevention systems, and endpoint security solutions, to detect potential threats
Safely acquire and preserve data integrity for cyber incident analysis, determining the technical and operational impact, root causes, and scope of incidents

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdapi

Platform: paylocity
Effort: medium