Security Engineer II

Own Your Impact. At Propio, we don't believe careers happen to people. We believe people create them.

Here, you're trusted to make decisions, challenge assumptions, drive innovation, and shape outcomes. Your success is not limited by hierarchy or tenure. It's fueled by your ambition, your curiosity, and your willingness to own your impact. If you're looking for a role where you can simply maintain the status quo, this probably isn't it, but if you're looking for a place where your ideas matter, your growth is accelerated, and your work creates meaningful impact across the world, we'd love to talk.

Every day, communication changes lives. A patient receives care they otherwise couldn't access. A family gains critical information. A business connects with a customer. A community becomes more inclusive. These moments happen because barriers are removed. And behind those moments are Propio team members who show up every day to solve problems, innovate, and build the future. This isn't just work.

This is world impact.

As a Security Engineer II
, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio. You will help development teams build secure applications and investigate threats across our environment. You will own assigned security reviews, investigations, and technical improvements with minimal oversight, working closely with Platform Engineering, Dev Ops, and IT. You will escape major incidents and risk decisions to security leadership.

• Take ownership of important initiatives and outcomes.
• Drive meaningful business results.
• Influence decisions and contribute new ideas.
• Partner with talented, high-performing team members.
• Challenge yourself through continuous learning and growth.
• Help shape the future of a rapidly growing organization.

• Review application designs, code changes, APIs, and integrations for security risks; recommend fixes and contribute to threat modeling for new features and major changes.
• Conduct targeted security testing of web applications and APIs, including authentication, authorization, session management, input validation, and sensitive data protection.
• Integrate and tune code, dependency, and secret scanning within CI/CD pipelines; validate findings, reduce false positives, and support developer remediation.
• Prioritize vulnerabilities based on exploitability, exposure, and business impact; track remediation, retest fixes, and
  * escalate* overdue high-risk issues.
• Coordinate penetration tests and remediation efforts; translate recurring findings into secure coding guidance and repeatable development practices.

• Triage and investigate alerts across applications, endpoints, identity, email, cloud, and network environments, distinguishing suspicious activity from expected behavior.
• Correlate logs and evidence to determine incident scope, impacted accounts and systems, timelines, and root cause while preserving evidence and documenting actions.
• Coordinate containment, eradication, and recovery with system owners under established procedures;
  * escalate* high-impact incidents and potentially disruptive actions.
• Deliver clear incident updates covering confirmed findings, uncertainties, business impact, and next steps; maintain accurate case documentation.
• Leverage incident findings to improve detections, logging, and response playbooks; participate in post-incident reviews and track corrective actions.

• Develop scripts and automation to reduce repetitive investigation and vulnerability management tasks, validating changes before deployment.
• Implement security tools and process improvements; share investigative techniques and help analysts strengthen triage, documentation, and escalation practices.

The most successful people at Propio aren't necessarily the ones with the longest resumes. They're the people who:

• Take ownership instead of waiting for direction.
• Embrace challenges as opportunities to grow.
• Continuously seek better ways of working.
• Turn ideas into action.
• Hold themselves and others accountable to high standards.
• Are driven by making a measurable impact.

Required Qualifications

• 5+ years of IT, software engineering, or information security experience, or an equivalent combination of education and relevant experience.
• Hands-on experience assessing…