Software Engineer II, Security

EverQuote NI is seeking a Software Engineer II, Security to join our team! In this role, you will join a team that bridges the gap between Security Engineering and Compliance to streamline vulnerability management. You will work proactively to maintain a security testing process that enables Product and Engineering teams to provide business value in a secure environment. As a senior engineer, you will be an important member of the team and instrumental in the design and delivery of key business applications and solutions. You will have input in architecture decision-making within the team and ensure we build scalable, performant, easy to maintain and cost-optimised solutions.

- Identifying and trialling new security tooling for our SDLC, particularly in the AI space.

- Coding solutions to engineering challenges in the security space, primarily using Python and SQL.

- Advocating and consulting with other engineers on security best practices and secure-by-design methodologies.

- Maintaining security data products such as SBOM, asset inventory, cloud infrastructure, and SIEM.

- Monitoring, logging, triaging and escalating cyber security threats, as well as documenting security events including IoC (Indicators of compromise).

- Conducting and collating security assessments through a variety of methods as appropriate.

- Creating reports and working collaboratively with engineering teams to remediate identified issues.

- Providing support and training for teams where needed.

What you bring to the team

- 2+ years work experience as a Security Analyst, Security Engineer, or in a similar role.

- Degree in Computer Science or equivalent practical experience.

- Experienced in programming languages such as Java, Python, Go, and / or SQL.

- Proficiency with AWS cloud platforms and particularly their security tools such as Security Hub, IAM, etc.

- Strong knowledge of principles such as risk assessment, threat modelling, the OWASP Top 10, information security practices, and encryption theory.

- Possess a clear understanding of secure development best practices.