Security Engineer
About the role
The Security Engineer is critical in designing, building, and operating security solutions that protect sensitive customer and business data across digital platforms, applications, infrastructure, and emerging technologies. The Security Engineer collaborates with DevOps, IT, Product, Application, Enterprise Architecture, Infrastructure & Operations, Program Management, and Security Operations teams to ensure that security is embedded throughout the technology lifecycle and insurance product delivery. The role also supports the secure adoption and use of Artificial Intelligence (AI) technologies and leverages AI, automation, and orchestration to enhance security capabilities, accelerate security workflows, improve detection and response, and reduce manual operational effort. The Security Engineer participates in security incident response activities and an on-call rotation to support timely investigation and response to high-priority security events.
Responsibilities
- Design and implement technical security controls across cloud, on-premises, and hybrid environments.
- Support secure architecture and security reviews for applications, APIs, third-party integrations, and AI-enabled solutions.
- Integrate security into CI/CD pipelines and automate security testing using SAST, DAST, SCA, secrets detection, and other security tooling.
- Analyze vulnerabilities across infrastructure and applications and drive risk-based remediation plans.
- Perform threat modeling for insurance systems, claims platforms, applications, APIs, cloud services, and AI-enabled workloads.
- Ensure infrastructure as code (I