Senior Security Engineer

*
* Who We Are:

** At OPENLANE we make wholesale easy so our customers can be more successful.

** We’re a technology company
** building the world’s most advanced—and uncomplicated—digital marketplace for used vehicles.  
** We’re a data company
** helping customers buy and sell smarter with clear, actionable insights they can understand and use.  
** And we’re an innovation company
** accelerating the future of wholesale remarketing through curiosity, collaboration, and an entrepreneurial spirit.

** Our Values:*
* ** Driven Way builders.
** We pursue challenges that inspire us to build, create, and innovate.  
** Relentless Curiosity.
** We seek to understand and improve our customers’ experience.  
** Smart Risk-Taking.
** We transform risk into progress through data, experience, and intuition.  
** Fearless Ownership.
** We deliver what we promise and learn along the way.
** Technical Benchmarking & PoC Execution**:
Leading the rigorous technical evaluation and stress-testing of new security technologies; performing deep-dive "bake-offs" to ensure tools meet high-performance requirements.
** Autonomous Technical Delivery:
** Proven ability to drive multiple high-stakes technical projects from concept to execution with total autonomy and surgical precision.

Advanced Domain Mastery:
In-depth technical proficiency and "hands-on-keyboard" experience in at least three of the following:
** Cloud Security Engineering:
** Deep technical knowledge of CSP primitives (AWS IAM, Azure NSGs, GCP Service Accounts) and automated deployment.
** Threat Intelligence Integration:
** Demonstrated ability to ingest raw threat intelligence and convert it into custom defensive signatures or proactive system modifications.
** Scientific Problem Solving:
** Exceptional analytical skills with the ability to apply the scientific method to troubleshoot "ghost in the machine" security issues and validate the efficacy of new controls.
** Technical Initiative:
** Ability to work independently to identify security gaps and engineer solutions without waiting for a directive.
** High-Stakes Communication:
** Excellent interpersonal skills with the ability to maintain composure and provide clear technical direction during high-pressure security events.
** Technical Force Multiplication:
** Strong ability to elevate the team’s technical ceiling through advanced peer reviews, "deep-dive" technical documentation, and hands-on mentoring of mid-level engineers.
** Specialized Knowledge Sharing:
** Experience developing and delivering high-level technical briefings and "brown-bag" sessions for engineering and Dev Ops teams on advanced security topics.
* Bachelor’s Degree in Computer Science or related field AND 5 years plus of dedicated IT Security experience OR 7+ years of equivalent IT experience with a strong focus on security.
* Proven expertise in evaluating information systems for threats and vulnerabilities and designing mitigation strategies.
* Demonstrated expertise in the management, optimization, and automation of security tools (e.g., SIEM, EDR, IDS/IPS, anti-virus, patch management, vulnerability management, application security static/dynamic analysis, etc.).
* Knowledge of security best practices, frameworks
* Deep understanding of application security concepts, secure coding practices, and Dev Sec Ops  principles.
* Relevant security certifications (e.g., CISSP, OSCP, CISM, GIAC certifications) are highly preferred; multiple certifications are a strong plus.
* Active participation and contribution to the open source and/or local IT/Info Sec community (e.g., presenting at conferences, contributing to tools) is a plus.
* Relevant security certifications (e.g., CISSP, OSCP, CISM, GIAC).
* Experience contributing to open-source security tools or participating in the Info Sec community.
* Experience delivering technical briefings, brown-bag sessions, or advanced internal training.
* Competitive pay
* Medical, dental, and vision benefits with employer HSA contributions (US) and FSA options (US)
* Immediately vested 401K (US) or RRSP (Canada) with company match
* Paid Vacation, Personal, and Sick Time
* Paid maternity and paternity leave (US)
* Employer-paid short-term…