Security Engineer II

Description

Security Engineer II

Own Your Impact. At Propio, we don't believe careers happen to people. We believe people create them.

Here, you're trusted to make decisions, challenge assumptions, drive innovation, and shape outcomes. Your success is not limited by hierarchy or tenure. It's fueled by your ambition, your curiosity, and your willingness to own your impact. If you're looking for a role where you can simply maintain the status quo, this probably isn't it, but if you're looking for a place where your ideas matter, your growth is accelerated, and your work creates meaningful impact across the world, we'd love to talk.

Why Propio?

Every day, communication changes lives. A patient receives care they otherwise couldn't access. A family gains critical information. A business connects with a customer. A community becomes more inclusive. These moments happen because barriers are removed. And behind those moments are Propio team members who show up every day to solve problems, innovate, and build the future. This isn't just work. This is world impact.

As a Security Engineer II, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio. You will help development teams build secure applications and investigate threats across our environment. You will own assigned security reviews, investigations, and technical improvements with minimal oversight, working closely with Platform Engineering, DevOps, and IT. You will escalate major incidents and risk decisions to security leadership.

You'll be empowered to:

• Take ownership of important initiatives and outcomes.
• Drive meaningful business results.
• Influence decisions and contribute new ideas.
• Partner with talented, high-performing team members.
• Challenge yourself through continuous learning and growth.
• Help shape the future of a rapidly growing organization.

What You'll Own

Application Security

• Review application designs, code changes, APIs, and integrations for security risks; recommend fixes and contribute to threat modeling for new features and major changes.
• Conduct targeted security testing of web applications and APIs, including authentication, authorization, session management, input validation, and sensitive data protection.
• Integrate and tune code, dependency, and secret scanning within CI/CD pipelines; validate findings, reduce false positives, and support developer remediation.
• Prioritize vulnerabilities based on exploitability, exposure, and business impact; track remediation, retest fixes, and escalate overdue high-risk issues.
• Coordinate penetration tests and remediation efforts; translate recurring findings into secure coding guidance and repeatable development practices.

Incident Response

• Triage and investigate alerts across applications, endpoints, identity, email, cloud, and network environments, distinguishing suspicious activity from expected behavior.
• Correlate logs and evidence to determine incident scope, impacted accounts and systems, timelines, and root cause while preserving evidence and documenting actions.
• Coordinate containment, eradication, and recovery with system owners under established procedures; escalate high-impact incidents and potentially disruptive actions.
• Deliver clear incident updates covering confirmed findings, uncertainties, business impact, and next steps; maintain accurate case documentation.
• Leverage incident findings to improve detections, logging, and response playbooks; participate in post-incident reviews and track corrective actions.

Security Engineering and Team Support

• Develop scripts and automation to reduce repetitive investigation and vulnerability management tasks, validating changes before deployment.
• Implement security tools and process improvements; share investigative techniques and help analysts strengthen triage, documentation, and escalation practices.

What Makes Someone Successful Here

The most successful people at Propio aren't necessarily the ones with the longest resumes. They're the people who:

• Take ownership instead of waiting for direction.
• Embrace challenges as opportunities to grow.
• Continuously seek better ways of working.
• Turn ideas into action.
• Hold themselves and others accountable to high standards.
• Are driven by making a measurable impact.

Requirements

What You'll Bring

Required Qualifications

• 5+ years of IT, software engineering, or information security experience, or an equivalent combination of education and relevant experience.
• Hands-on experience assessing applications for security weaknesses and investigating security alerts or incidents.
• Working knowledge of common web and API vulnerabilities, including access control, injection, authentication, and configuration issues, with the ability to recommend and validate fixes.
• Ability to review code in at least one programming language and develop scripts in Python, PowerShell, Bash, or a similar language.
• Experience with Git, CI/CD pipelines, and security testing tools, including SAST, DAST, dependency scanning, and secret detection.
• Experience using SIEM platforms and endpoint, identity, or cloud telemetry to investigate threats, with an understanding of incident containment and evidence preservation.
• Solid understanding of HTTP, TLS, DNS, networking, and Windows or Linux systems, and their role in application security and incident investigations.
• Strong troubleshooting, prioritization, and cross-functional collaboration skills, with the ability to clearly      communicate technical findings verbally and in writing.

Preferred Qualifications

• Experience securing cloud applications, including IAM, containers, secrets management, and infrastructure as code.
• Familiarity with OAuth 2.0, OpenID Connect, SAML, and security considerations for multitenant applications.
• Experience improving detection coverage, automating response workflows, or supporting threat hunting and incident response exercises.
• Familiarity with protecting sensitive healthcare data and supporting HIPAA-related security requirements.
• Relevant certifications such as GWEB, GWAPT, GCIH, GCIA, Security+, or equivalent demonstrated practical skills.
• Even if your experience doesn't perfectly match every qualification, we encourage you to apply. We're looking for potential, drive, and a commitment to growth as much as experience.

What You'll Gain

Own Your Growth: We invest in people who invest in themselves. You'll have opportunities to learn, develop, and expand your capabilities while building a meaningful career.

Own Your Impact: You'll see the connection between your work and our success. We believe great people deserve the opportunity to make a real difference.

Own Your Innovation: The best ideas can come from anywhere. We encourage curiosity, creativity, and challenging the way things have always been done.

Own Your Success: Whether you're building expertise, pursuing leadership opportunities, or expanding your career path, we'll give you room to grow and the support to get there.

At Propio, your work doesn't just move a company forward. It helps connect people, communities, and opportunities across the world.  Ready to Build Something Bigger? Apply today and discover what happens when you own your success.