DAT Freight & Analytics
Sr Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About DAT Freight & Analytics
DAT Freight & Analytics is a prominent software and analytics company in the supply chain logistics sector. It operates North America's largest on-demand truckload freight marketplace and provides data-driven solutions for shippers, freight brokers, carriers, and 3PLs. Founded in 1978 in Portland, Oregon, DAT has nearly 50 years of experience and has analyzed over $1 trillion in freight transactions. Co-headquartered in Denver, Colorado, and Beaverton, Oregon, with additional offices in Seattle, Springfield, and Bangalore, DAT employs around 500 people. The company offers an integrated suite of freight matching, analytics, and management tools, including the DAT One platform, DAT iQ analytics, and the largest truckload marketplace. These solutions help users optimize routing, budgeting, and adapt to market changes, supporting hundreds of thousands of monthly users across North America.
Security at DAT Freight & Analytics
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“DAT's AppSec mission, as stated by the Network Integrity Unit, is to maintain the integrity of their network. Their risk philosophy involves leading comprehensive security strategy and execution across all organizational facets. A stated goal is enabling two-factor authentication. Information regarding developer enablement vs. gatekeeping is not publicly available. No public statements were found framing their philosophy as 'developer-first' or 'gatekeeping'.”
Security Team
Dr. Erika Voss is the Chief Information Security Officer (CISO) and Vice President of Information Security at DAT. Public pages identify her as the senior security leader, but do not provide a quoted organizational chart or explicit reporting chain. Information regarding team size, active AppSec job postings, and common skill/tool patterns is not publicly available. Public materials identify a senior security leader but do not enumerate team roles, size, or an AppSec-specific organizational model.
Key Initiatives
No public evidence was found for a Security Champions Program, 'Shift Left' practices, or AppSec-specific vulnerability management processes. General fraud/security processes exist, such as 'maintaining a 100% response rate to network complaints.' Secure SDLC artifacts are not publicly available. Recent initiatives include the 'Carrier Management Suite' which is part of broader security and fraud-prevention tools. No explicit AppSec initiatives like SAST/SCA/DevSecOps rollouts were found in the public record within the last six months. No public statements describing AppSec program artifacts were located.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.