Job Application Deadline: 10/31/2026
The OpportunitySecurity Architecture & Engineering (SAE) is the hands-on engineering arm of DAT's Information Security organization, sitting alongside the Security Operations Center (SOC) and Governance, Risk & Compliance (GRC) teams. SAE owns vulnerability management, cloud and network security, product security (AppSec/DevSecOps), and the security tooling that protects DAT's platforms and customer data. It's a small, high-ownership team - you won't be one of dozens of engineers on a rotation; the work you do has direct, visible impact on how quickly DAT can find, fix, and close out real security risk.
What You'll Do- Vulnerability remediation - own and drive vulnerabilities identified through DAT's scanning and monitoring stack (including GitHub Advanced Security and cloud security tooling) through to closure against defined SLAs.
- Incident response - participate in the security on-call rotation and serve as a technical responder during active security incidents, following DAT's incident response runbooks.
- Secure design review - review architecture and feature designs from engineering teams for security risk as part of DAT's Secure Design Review process, before code ships.
- Security tooling - maintain and improve the tools that make security scale, including WAF, endpoint protection, vulnerability scanning, and SIEM/alerting integrations.
- Cloud & network security - contribute to ongoing cloud security hardening and Zero Trust network initiatives across DAT's AWS environment.
- Cross-team partnership - work directly with product and engineering teams to close security exceptions, remediate findings, and build security into their workflows - without owning their roadmap.
What You'll Bring- 2-4 years of experience in a security engineering, DevSecOps, or closely related infrastructure/engineering role.
- Working knowledge of cloud security fundamentals, ideally AWS (IAM, network security groups, logging/monitoring).
- Hands-on experience with vulnerability management tools and processes - finding, triaging, and driving remediation, not just reporting.
- Comfort reading and writing code or scripts (Python, Bash, or similar) to automate security tooling and workflows.
- Ability to work cross-functionally with engineering teams and communicate security risk in terms they can act on.
- Willingness to participate in an on-call rotation for security incidents.
Bonus Skills- Experience with any of DAT's current security stack: CrowdStrike, GitHub Advanced Security (GHAS), SonarCloud, Cloudflare WAF, Auth0, or Torq.
- A security certification such as Security+, GSEC, or an AWS security certification.
- Prior experience on a lean security team where engineers own broad scope rather than a narrow specialty.
- Familiarity with SOX or similar compliance-driven environments.
- Medical, Dental, Vision, Life, and AD&D insurance
- Parental Leave
- Flexible Vacation Time (FVT)
- An additional 10 holidays of paid time off per calendar year
- 401k matching (immediately vested)
- Employee Stock Purchase Plan
- Short- and Long-term disability sick leave
- Flexible Spending Accounts
- Health Savings Accounts
- Employee Assistance Program
- Additional programs - Employee Referral, Internal Recognition, and Wellness
- Free TriMet transit pass (Beaverton Office)
- Competitive salary and benefits package
- Work on impactful projects in a cutting-edge environment
- Collaborative and supportive team culture
- Opportunity to make a real difference in the trucking industry
- Employee Resource Groups
*This position is not eligible for visa sponsorship**
For Washington-based candidates, in compliance with the Washington State Pay Transparency Law, the salary range for this role is $129,000.00 - $165,600.00 + target bonus. DAT considers factors such as scope and responsibilities of the position, candidate's work experience, education and training, core skills, internal equity, and market and business elements when extending an offer.
#LI-DR1
#LI-hybrid
