Senior Security Engineer

About this role

Senior Security Engineer - IS07FE We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.   

The  Enterprise Cyber Focal Office – Sr. Security Engineer  is a senior, hands-on technical leader and trusted partner to the Enterprise Cyber Focal Lead. This role is responsible for designing, developing, and implementing complex, AI ‑ driven cyber security solutions that strengthen application security, vulnerability management, and enterprise cyber resilience.

Operating at a technical lead/manager (T7) level, this role combines  deep engineering expertise ,  cloud-native architecture , and  applied AI  with strong leadership and influence across Cyber, Reliability Engineering, Infrastructure Engineering and Software Engineering teams. The role also provides technical leadership and direction to offshore teams and drives adoption of secure-by-design engineering practices across the enterprise.

This role will have a  Hybrid work schedule,  with the expectation of working in an office (Columbus, OH, Hartford, CT or Charlotte, NC) 3 days a week (Tuesday through Thursday). 

Technical Leadership & Solution Delivery • Serve as a  trusted technical advisor  to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high ‑ impact technical solutions.

• Design, build, and implement complex cyber solutions  leveraging AI/ML to improve threat detection, vulnerability management, risk prioritization, and automation.

• Lead  end-to-end solution architecture , including design reviews, implementation, and operational readiness for cyber platforms and tooling.

• Apply  full ‑ stack application development expertise  to build secure, resilient, and performant cyber applications and services.

Cloud & AI Engineering • Architect and deliver solutions using  AWS cloud services , following cloud-native, well ‑ architected, and security principles.

• Apply  hands-on AI/ML capabilities  (GCP preferred) to build and operationalize intelligent cyber capabilities (e.g., analytics, anomaly detection, automation,   decision support).

• Partner with data, AI, and platform teams to ensure solutions are scalable, secure, and production-ready.

Application Security • Demonstrated hands ‑ on experience with enterprise security, logging, and monitoring platforms (e.g., Splunk, Dynatrace, Orca Security, Akamai), leveraging these tools to drive threat detection, observability, and risk reduction at scale.

• Applies deep technical expertise in security telemetry, application logging, and runtime monitoring to design, integrate, and optimize application level security and observability capabilities enterprise ‑ wide.

• Experienced in Leveraging  GitHub Copilot  as a hands ‑ on productivity and quality accelerator for secure software development, including code scaffolding, refactoring, test generation, and documentation, while ensuring adherence to enterprise security and coding standards.

Application Vulnerability Management • Own and lead application vulnerability management  from a technical standpoint, including tooling, integrations, automation, and remediation workflows. 

• Partner with CISO (THIP) and Engineering organization and drive modernization and automation of vulnerability intake, prioritization, and reporting using AI and data-driven techniques.

• Partner with application teams to embed vulnerability remediation into SDLC and CI/CD pipelines.

Engineering Partnership & Best Practices • Act as a  trusted partner to Security, Platform, Reliability and Software Engineers , enabling secure, reliable, and resilient application delivery.

• Define, promote, and enforce  application security best practices , including secure coding, dependency management, secrets handling, logging, and monitoring.

• Influence engineering teams through technical standards, reference architectures, and hands-on guidance rather than mandate.

Team Leadership & Delivery Excellence • Provide technical leadership to an  offshore engineering team , including design guidance, code reviews, mentoring, and delivery oversight.

• Ensure high engineering quality, operational stability, and adherence to enterprise security and compliance standards.

• Contribute to roadmap planning, prioritization, and continuous improvement of cyber platforms and capabilities.

Required Experience & Qualifications • 6+ years  of experience in cyber-focused application development (security engineering), with time in technical leadership roles.

• Strong  security application development  experience (frontend, backend, APIs, integrations). This includes proficiency in modern frameworks and languages such as Angular, React, or Vue.js with strict Content Security Policy (CSP) and XSS prevention. Node.js or NestJS using security modules like Helmet, Jose, and express-validator. 

• Proven experience designing and delivering  enterprise-scale cyber, security or application platforms .

• Experience leading and mentoring  distributed/offshore technical teams , using Splunk, Dynatrace, Akamai or other events and logs. 

• Ability to operate as a  trusted partner and influencer  across Cyber, Engineering, and Infrastructure organizations.

• Experience across  logging and monitoring, edge and application security, AI ‑ assisted development, ITSM workflows, CI/CD pipelines, and automated deployment platforms , ensuring scalable, secure, and repeatable engineering practices.

• Knowledge of  application security , vulnerability management, and secure SDLC practices is preferred.

• The role requires expertise in API design (REST/GraphQL), database technologies (SQL and NoSQL), and cloud ‑ native development on platforms such as Azure or AWS. A full ‑ stack tech lead is also adept in CI/CD practices, infrastructur

Similar jobs

• Senior Security Engineer — Zip · San Francisco
• Senior Security Engineer — Pairteam · Remote
• Senior Security Engineer — Godaddy · Remote
• Senior Security Engineer — Ardentmc · Washington, D.C. Metro - hybrid/remote
• Senior Security Engineer — Sigmacomputing · San Francisco, CA and New York, New York
• Senior Security Engineer — CNI · Reston, VA
• Senior Security Engineer — Karbon · Austin, TX, United States; Chicago, IL, United States; Dallas, TX, United States; Denver, CO, United States; Los Angeles, CA, United States; San Diego, CA, United States; San Francisco, CA, United States
• Senior Security Engineer — Overstory · Remote