Information Security Engineer II
US-CO-Denver
- Apply
-
-
How Do You Want to Share?
Our fast-paced and collaborative environment inspires us to create, think, and challenge each other in ways that make our solutions and our teams better. Whether you’re interested in engineering or development, marketing or sales, or something else – if this sounds like you, then we’d love to hear from you!
We are headquartered in Denver, Colorado, with offices in the US, Canada, and India.
$110,000 - $135,000 / year
The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations.
Underpinned by unmatched speed and performance power, we are the trusted backbone that’s taking the insurance industry from friction to flow with Distribution Velocity – speed, performance, and trust - to drive growth at scale.
With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era.
Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India.
The Security Engineer II will play a critical role in designing, implementing, and optimizing security solutions for cloud-based and application security environments. This role focuses on advancing cloud security (AWS & Azure), securing APIs, and ensuring effective WAF deployment to protect both modern and legacy web applications.
Core Responsibilities:
- Architect and implement cloud security solutions in AWS and Azure, focusing on IAM, encryption, security logging, and network segmentation.
- Manage and optimize Web Application Firewalls (WAF), implementing custom rulesets and exception handling for legacy applications.
- Conduct in-depth application security reviews, threat modeling, and code assessments to identify vulnerabilities and enforce best practices.
- Design and integrate security controls into CI/CD pipelines, ensuring a DevSecOps-first approach.
- Develop and maintain security automation scripts and Infrastructure-as-Code (Terraform, Ansible, etc.).
- Work closely with compliance teams to align security measures with SOC 2, ISO 27001, and insurance industry regulations.
- Assess security risks in applications and cloud environments, providing recommendations that balance security with business needs.
- Support security audits and compliance initiatives by providing evidence and technical explanations for security controls.
- Act as an escalation point for Security Operations incidents and participate in an on-call Security Operations rotation every 4-6 weeks.
Knowledge, Skills, and Abilities:
- Strong knowledge of modern application architectures (microservices, containers, APIs) and their security implications.
- Hands-on experience with AWS and Azure security services, including IAM, Security Groups, KMS, WAF, and Defender for Cloud.
- Deep understanding of WAF tuning strategies for modern and legacy applications.
- Experience with securing APIs, container security (Docker, Kubernetes), and DevSecOps practices.
- Proficiency in Python, Go, or PowerShell for security automation.
- Strong ability to assess risks, propose mitigation strategies, and communicate technical security concepts to engineering teams.
Qualifications:
- Master’s degree in Cybersecurity, Computer Science, or related field OR equivalent experience (7+ years in security engineering or related field).
- Security certifications are a plus (AWS Security Specialty, Azure Security Engineer Associate, GCP Security Engineer).
Additional Requirements:
- Travel required up to 10% of the time outside of the assigned office.
- Occasional lifting and/or moving up to 10 pounds.
- Frequent repetitive hand and arm movements required to operate a computer.
- Specific vision abilities required for close vision (computer work, etc.).
- Frequent sitting and/or standing.
Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions!
Vertafore is a drug free workplace and conducts preemployment drug and background screenings.
The selected candidate must be legally authorized to work in the United States.
The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship.
Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law.
We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
Why Vertafore is the place for you: *Canada Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- Medical, vision & dental plans
- Life, AD&D
- Short Term and Long Term Disability
- Pension Plan & Employer Match
- Maternity, Paternity and Parental Leave
- Employee and Family Assistance Program (EFAP)
- Education Assistance
- Additional programs - Employee Referral and Internal Recognition
Why Vertafore is the place for you: *US Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- We have a Flexible First work environment! Our North America team members use our offices for collaboration, community and team-building, with members asked to sometimes come into an office and/or travel depending on job responsibilities. Other times, our teams work from home or a similar environment.
- Medical, vision & dental plans
- PPO & high-deductible options
- Health Savings Account & Flexible Spending Accounts Options:
- Health Care FSA
- Dental & Vision FSA
- Dependent Care FSA
- Commuter FSA
- Life, AD&D (Basic & Supplemental), and Disability
- 401(k) Retirement Savings Plain & Employer Match
- Supplemental Plans - Pet insurance, Hospital Indemnity, and Accident Insurance
- Parental Leave & Adoption Assistance
- Employee Assistance Program (EAP)
- Education & Legal Assistance
- Additional programs - Tuition Reimbursement, Employee Referral, Internal Recognition, and Wellness
- Commuter Benefits (Denver)
The selected candidate must be legally authorized to work in the United States.
The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship.
Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law.
The Professional Services (PS) and Customer Success (CX) bonus plans are a quarterly monetary bonus plan based upon individual and practice performance against specific business metrics. Eligibility is determined by several factors including: start date, good standing in the company, and actives status at time of payout.
The Vertafore Incentive Plan (VIP) is an annual monetary bonus for eligible employees based on both individual and company performance. Eligibility is determined by several factors including: start date, good standing in the company, and actives status at time of payout.
Commission plans are tailored to each sales role but common components include quota, MBO's and ABPMs. Salespeople receive their formal compensation plan within 30 days of hire.
Vertafore is a drug free workplace and conducts preemployment drug and background screenings.
We do not accept resumes from agencies, headhunters or other suppliers who have not signed a formal agreement with us.
We want to make sure our recruiting process is accessible for everyone. if you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact recruiting@vertafore.com
Just a note, this contact information is for accommodation requests only.