Security Engineer

DAT Freight & Analytics; Denver (CO); On-site; USD 114,000 - 149,000; Full time

Benefits offered by this job

Medical, Dental, Vision, Life, and AD&

Parental Leave

Flexible Time Off

401k matching (immediately vested)

Employee Stock Purchase Plan

Short- and Long-term disability

Flexible Spending Accounts

Job summary

DAT Freight & Analytics is seeking a Security Engineer for our Denver, CO office. This hands-on role focuses on implementing security controls across cloud deployments, CI/CD pipelines, and containerized environments.

You will author runbooks and diagrams, work with DevSecOps practices (SAST/DAST/SCA), apply NIST controls, and help embed security into the SDLC while collaborating across product teams. Preferred candidates have 2–4 years in cybersecurity or cloud security, with knowledge of

Qualifications

• 2–4 years in cybersecurity engineering or infrastructure/cloud security.
• Experience with cloud security controls and secure cloud deployments.
• Knowledge of DevSecOps and container security practices.
• Familiarity with NIST 800-53, SOC 2, CIS Benchmarks, and Zero Trust.

Responsibilities

• Apply security architecture principles to design problems with secure product innovation.
• Build and maintain automation workflows integrated with CI/CD pipelines.
• Author runbooks, architecture diagrams, and security deployment specs.
• Embed security into SDLC and production systems (DevSecOps, IaC scanning, SAST/DAST/SCA).
• Identify control gaps using NIST/CIA frameworks and prioritize risk.
• Assist in incident response and develop detections for threat patterns.

Skills

Team collaboration

Growth mindset

Organizational skills

Technical documentation

Handling confidential information

Cloud environments

Automation

DevSecOps

MITRE ATT&CK

Education

B.S. in cybersecurity, computer science, or related field

Security+ or higher certifications

AWS Certified Security - Specialty

Tools

Terraform

CloudFormation

Docker

Kubernetes

CI/CD tooling

Job description

About DAT

DAT Freight & Analytics is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of freight and logistics innovation for nearly five decades. Founded in 1978, DAT operates the largest freight marketplace in North America — processing 250 million+ load posts annually and maintaining one of the largest repositories of freight market transaction data in the world. On a defined path to $1 billion in revenue, DAT deploys a suite of software solutions, machine learning models, and intelligent automation tools that help brokers, carriers, and shippers price freight accurately, source capacity, reduce risk, and operate more efficiently. With nearly 700 teammates across offices in Denver, CO; Portland, OR; Seattle, WA; Springfield, MO; Toronto, ON; and Bangalore, India, DAT combines the credibility of a multi-decade market leader with the drive of a company that is not done disrupting the industry it helped build. For more information, visit www.DAT.com

About DAT

DAT Freight & Analytics is an award-winning employer of choice and a next-generation SaaS technology company that has been at the leading edge of freight and logistics innovation for nearly five decades. Founded in 1978, DAT operates the largest freight marketplace in North America — processing 250 million+ load posts annually and maintaining one of the largest repositories of freight market transaction data in the world. On a defined path to $1 billion in revenue, DAT deploys a suite of software solutions, machine learning models, and intelligent automation tools that help brokers, carriers, and shippers price freight accurately, source capacity, reduce risk, and operate more efficiently. With nearly 700 teammates across offices in Denver, CO; Portland, OR; Seattle, WA; Springfield, MO; Toronto, ON; and Bangalore, India, DAT combines the credibility of a multi-decade market leader with the drive of a company that is not done disrupting the industry it helped build. For more information, visit www.DAT.com

Application Deadline: 7/31/2026

The Opportunity

DAT is looking for a Security Engineer to join our security team. This position can be based in Denver Colorado Office. The Security Engineer will join our Security Architecture and Engineering team. As a key member, you’ll own your work end-to-end within a defined scope, contributing to the implementation and adoption of security controls and tooling to improve our security posture. You will collaborate with cross-functional partners to keep work moving and ensure security is embedded into our SDLC. This is a hands‑on role that combines engineering, structured problem-solving, and cross‑team collaboration.

What You’ll Do

• Apply security architecture principles to defined problems, evaluating design tradeoffs considering security, usability, and operational impact to support secure product innovation.
• Build and maintain automation workflows within the team's toolset, integrating with CI/CD pipelines, logging platforms, and cloud security architecture.
• Independently author runbooks, architecture diagrams, and technical specifications for secure cloud deployments, container hardening, and access management.
• Engage constructively with engineering and product partners to embed security into SDLC and production systems (DevSecOps, IaC scanning, SAST/DAST/SCA, etc.).
• Apply NIST control families and CIA principles to evaluate control coverage, identify gaps within your scope, and apply risk prioritization frameworks consistently.
• Resolve routine security problems independently and assist in incident response, escalating complex issues with relevant context and developing detections for known threat patterns (e.g., MITRE ATT&CK).

The Skills And Experience You’ll Bring

• Team player who effectively collaborates across teams and adapts communication style to both technical and non-technical audiences.
• Self-motivated with a growth mindset, applying structured thinking to diagnose problems rather than jumping to solutions.
• Solid organizational skills to manage defined workstreams, coordinate dependencies, and proactively flag risks or blockers to delivery.
• Ability to independently author clear technical documentation and identify gaps in existing processes.
• Ability to handle sensitive and confidential information.
• Working knowledge across multiple security domains, including cloud environments (IAM, network security, posture alignment) and automation via Terraform, CloudFormation, or similar.
• Understanding of frameworks such as NIST 800-53, SOC 2, CIS Benchmarks, and Zero Trust Network Architecture.
• Familiarity with DevSecOps pipelines, containerization (Docker, Kubernetes), and CI/CD security tooling.
• Experience tuning rules to reduce false positives and maintaining cloud-native logging and monitoring frameworks.
• Proven experience (typically 2-4 years) in cybersecurity engineering or infrastructure/cloud security roles.
• B.S. degree in cybersecurity, computer science or related technical field is a plus.
• Relevant foundational or intermediate certifications are a plus (e.g., Security+, AWS Certified Security - Specialty, or equivalent).

Why DAT?

DAT is an award winning employer of choice.

For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We’ve been an employer of choice in the Portland metropolitan area for four decades, and within one year of opening our Denver office, DAT was #26 on Built In Colorado’s 100 Best Places to Work In Colorado.

• Medical, Dental, Vision, Life, and AD&D insurance
• Parental Leave
• Flexible Time Off
• An additional 10 holidays of paid time off per calendar year
• 401k matching (immediately vested)
• Employee Stock Purchase Plan
• Short- and Long-term disability sick leave
• Flexible Spending Accounts
• Health Savings Accounts
• Employee Assistance Program
• Additional programs - Employee Referral, Internal Recognition, and Wellness
• Free TriMet transit pass (Beaverton Office)
• Competitive salary and benefits package
• Work on impactful projects in a cutting-edge environment
• Collaborative and supportive team culture
• Opportunity to make a real difference in the trucking industry
• Employee Resource Groups

For Colorado-based candidates, in compliance with the Colorado Equal Pay for Equal Work Act, the salary range for this role is $113,841 - $148,580. DAT considers factors such as scope and responsibilities of the position, candidate's work experience, education and training, core skills, internal equity, and market and business elements when extending an offer.

DAT embraces the value of a diverse workforce, and believes it is a core strength of our company that we encourage those values in every DAT employee, at every level of our organization, regardless of tenure or rank. We provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Equal Opportunity Employer/Protected Veterans/Individuals With Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)