> Markdown version of [/jobs/ext/4181848-security-engineer-ii](https://www.wearedevelopers.com/jobs/ext/4181848-security-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer II - **Company:** Propio LS LLC - **Location:** Overland Park, KS, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Software System Penetration Testing, Bash Shell, Cloud Computing, Code Review, CompTIA Security+, Continuous Integration, Data Validation, Linux, DevOps, Domain Name System (DNS), Python (Programming Language), Key Management, OAuth, Windows PowerShell, Openid Connect, Security Assertion Markup Language (SAML), Secure Coding, Session Management, Security Information and Event Management, Software Vulnerability Management, Web Applications, Data Logging, Software Security, Software Troubleshooting, Git, GWAPT, Cybercrime, Maintaining Code, Static Application Security Testing, Programming Languages, Dynamic Application Security Testing - **Published:** October 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=38108e937c814a71 ## About the Role * 5+ years of IT, software engineering, or information security experience, or an equivalent combination of education and relevant experience. * Hands-on experience assessing applications for security weaknesses and investigating security alerts or incidents. * Working knowledge of common web and API vulnerabilities, including access control, injection, authentication, and configuration issues, with the ability to recommend and validate fixes. * Ability to review code in at least one programming language and develop scripts in Python, PowerShell, Bash, or a similar language. * Experience with Git, CI/CD pipelines, and security testing tools, including SAST, DAST, dependency scanning, and secret detection. * Experience using SIEM platforms and endpoint, identity, or cloud telemetry to investigate threats, with an understanding of incident containment and evidence preservation. * Solid understanding of HTTP, TLS, DNS, networking, and Windows or Linux systems, and their role in application security and incident investigations. * Strong troubleshooting, prioritization, and cross-functional collaboration skills, with the ability to clearly communicate technical findings verbally and in writing., * Experience securing cloud applications, including IAM, containers, secrets management, and infrastructure as code. * Familiarity with OAuth 2.0, OpenID Connect, SAML, and security considerations for multitenant applications. * Experience improving detection coverage, automating response workflows, or supporting threat hunting and incident response exercises. * Familiarity with protecting sensitive healthcare data and supporting HIPAA-related security requirements. * Relevant certifications such as GWEB, GWAPT, GCIH, GCIA, Security+, or equivalent demonstrated practical skills. * Even if your experience doesn't perfectly match every qualification, we encourage you to apply. We're looking for potential, drive, and a commitment to growth as much as experience. ## Description As a Security Engineer II, you'll have the opportunity to make a meaningful contribution to the continued growth and transformation of Propio. You will help development teams build secure applications and investigate threats across our environment. You will own assigned security reviews, investigations, and technical improvements with minimal oversight, working closely with Platform Engineering, DevOps, and IT. You will escalate major incidents and risk decisions to security leadership. You'll be empowered to: * Take ownership of important initiatives and outcomes. * Drive meaningful business results. * Influence decisions and contribute new ideas. * Partner with talented, high-performing team members. * Challenge yourself through continuous learning and growth. * Help shape the future of a rapidly growing organization., * Review application designs, code changes, APIs, and integrations for security risks; recommend fixes and contribute to threat modeling for new features and major changes. * Conduct targeted security testing of web applications and APIs, including authentication, authorization, session management, input validation, and sensitive data protection. * Integrate and tune code, dependency, and secret scanning within CI/CD pipelines; validate findings, reduce false positives, and support developer remediation. * Prioritize vulnerabilities based on exploitability, exposure, and business impact; track remediation, retest fixes, and escalate overdue high-risk issues. * Coordinate penetration tests and remediation efforts; translate recurring findings into secure coding guidance and repeatable development practices. Incident Response * Triage and investigate alerts across applications, endpoints, identity, email, cloud, and network environments, distinguishing suspicious activity from expected behavior. * Correlate logs and evidence to determine incident scope, impacted accounts and systems, timelines, and root cause while preserving evidence and documenting actions. * Coordinate containment, eradication, and recovery with system owners under established procedures; escalate high-impact incidents and potentially disruptive actions. * Deliver clear incident updates covering confirmed findings, uncertainties, business impact, and next steps; maintain accurate case documentation. * Leverage incident findings to improve detections, logging, and response playbooks; participate in post-incident reviews and track corrective actions. Security Engineering and Team Support * Develop scripts and automation to reduce repetitive investigation and vulnerability management tasks, validating changes before deployment. * Implement security tools and process improvements; share investigative techniques and help analysts strengthen triage, documentation, and escalation practices. What Makes Someone Successful Here The most successful people at Propio aren't necessarily the ones with the longest resumes. They're the people who: * Take ownership instead of waiting for direction. * Embrace challenges as opportunities to grow. * Continuously seek better ways of working. * Turn ideas into action. * Hold themselves and others accountable to high standards. * Are driven by making a measurable impact.