Software Engineer II, Security

Software Engineer II, Security Location: Belfast, NI / Hybrid (This role requires working in-office 3 days per week.) About us: EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance entities, enabling the largest insurance carriers and thousands of agents to maximize customer acquisition across digital channels. Fueled by our proprietary data assets and our AI traffic engine, EverQuote is transforming the way providers attract and engage consumers to grow market share. Joining our team puts you at the forefront of this transformation. You will collaborate with a group of builders to solve complex problems and reshape a massive industry. If you want to drive real-world impact and do the best work of your career, you’ve found your home. We move fast, follow the data, and hold ourselves to high standards. If that's how you work too, this is the role for you. About the role: EverQuote NI is seeking a Software Engineer II, Security to join our team! In this role, you will join a team that bridges the gap between Security Engineering and Compliance to streamline vulnerability management. You will work proactively to maintain a security testing process that enables Product and Engineering teams to provide business value in a secure environment. As a senior engineer, you will be an important member of the team and instrumental in the design and delivery of key business applications and solutions. You will have input in architecture decision-making within the team and ensure we build scalable, performant, easy to maintain and cost-optimised solutions. What you'll do: • Identifying and trialling new security tooling for our SDLC, particularly in the AI space. • Coding solutions to engineering challenges in the security space, primarily using Python and SQL. • Advocating and consulting with other engineers on security best practices and secure-by-design methodologies. • Maintaining security data products such as SBOM, asset inventory, cloud infrastructure, and SIEM. • Monitoring, logging, triaging and escalating cyber security threats, as well as documenting security events including IoC (Indicators of compromise). • Conducting and collating security assessments through a variety of methods as appropriate. • Creating reports and working collaboratively with engineering teams to remediate identified issues. • Providing support and training for teams where needed. What you bring to the team: • 2+ years work experience as a Security Analyst, Security Engineer, or in a similar role. • Degree in Computer Science or equivalent practical experience. • Experienced in programming languages such as Java, Python, Go, and / or SQL. • Proficiency with AWS cloud platforms and particularly their security tools such as Security Hub, IAM, etc. • Strong knowledge of principles such as risk assessment, threat modelling, the OWASP Top 10, information security practices, and encryption theory. • Possess a clear understanding of secure development best practices. • Continuous integration and deployment tools. • Proficient with Linux environments. • Entrepreneurial mindset, want to grow a business, and love working with a team. • Comfortable using data to support and validate your concepts. • Thrive in a fast-paced work environment where everyday contributions have a big impact. • Ability to quickly diagnose and solve code problems, as well as help others unblock themselves. • Passionate about sharing knowledge and mentoring teammates. The base salary offered for this position is determined by several factors, including the applicant’s job-related skills, relevant experience, education or training, and work location. In addition to base salary, our total compensation package may inc