Software Engineer II, Security

About the role

Software Engineer II, Security

Location: Belfast, NI / Hybrid

(This role requires working in-office 3 days per week.)

About us:

EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance entities, enabling the largest insurance carriers and thousands of agents to maximize customer acquisition across digital channels. Fueled by our proprietary data assets and our AI traffic engine, EverQuote is transforming the way providers attract and engage consumers to grow market share.

Joining our team puts you at the forefront of this transformation. You will collaborate with a group of builders to solve complex problems and reshape a massive industry. If you want to drive real-world impact and do the best work of your career, you’ve found your home. We move fast, follow the data, and hold ourselves to high standards. If that's how you work too, this is the role for you.

About the role:

EverQuote NI is seeking a Software Engineer II, Security to join our team! In this role, you will join a team that bridges the gap between Security Engineering and Compliance to streamline vulnerability management. You will work proactively to maintain a security testing process that enables Product and Engineering teams to provide business value in a secure environment. As a senior engineer, you will be an important member of the team and instrumental in the design and delivery of key business applications and solutions. You will have input in architecture decision-making within the team and ensure we build scalable, performant, easy to maintain and cost-optimised solutions.

What you'll do:

- Identifying and trialling new security tooling for our SDLC, particularly in the AI space.

- Coding solutions to engineering challenges in the security space, primarily using Python and SQL.

- Advocating and consulting with other engineers on security best practices and secure-by-design methodologies.

- Maintaining security data products such as SBOM, asset inventory, cloud infrastructure, and SIEM.

- Monitoring, logging, triaging and escalating cyber security threats, as well as documenting security events including IoC (Indicators of compromise).

- Conducting and collating security assessments through a variety of methods as appropriate.

- Creating reports and working collaboratively with engineering teams to remediate identified issues.

- Providing support and training for teams where needed.

What you bring to the team:

- 2+ years work experience as a Security Analyst, Security Engineer, or in a similar role.

- Degree in Computer Science or equivalent practical experience.

- Experienced in programming languages such as Java, Python, Go, and / or SQL.

- Proficiency with AWS cloud platforms and particularly their security tools such as Security Hub, IAM, etc.