Lead Application Security Engineer

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Ensure the security of Lincoln Financial applications and services.

• Conduct design reviews, code assessments, and dynamic analyses.

• Assess the security posture of AI/ML systems, including applications integrated with LLMs, RAG pipelines, and agentic workflows.

• Identify, communicate, and facilitate the resolution of vulnerabilities.

• Act as a subject matter expert for teams focused on application development and infrastructure.

• Effectively communicate security concepts to diverse technical audiences.

• Execute security assessments for both web and mobile applications.

• Research and promote new security solutions and technologies.

• Keep up-to-date with security trends, vulnerabilities, and testing methodologies.

• Contribute to relevant policies, standards, and supporting documentation.

• Integrate security best practices and controls throughout all stages of the Software Development Life Cycle (SDLC).

⛳️ Requirements

• Bachelor’s degree or 4+ years of equivalent work experience.

• 5-7+ years of experience in Information Technology that aligns directly with the responsibilities of this position.

• Extensive background in web application security.

• Strong understanding of application security throughout the SDLC.

• Experience with agile delivery methodologies.

• Proven ability to integrate security into DevOps practices.

• Familiarity with static application security testing tools like Fortify, Checkmarx, and Veracode.

• Experience with dynamic analysis tools such as AppScan, WebInspect, Burp Suite, and OWASP ZAP.

• Knowledge of network infrastructure, including firewalls, WAFs, and IPS.

• Understanding of common DMZ architectures.

• Agile mindset with awareness and comprehension of Agile methodologies.

• Preferred experience in source code review.

• Prior experience in financial services is preferred.

• Preferred certifications include OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, or GIAC GSSP-NET.

🏝️ Benefits

• Clearly defined career paths and job levels.

• Opportunities for leadership development and virtual training.

• Paid time off and parental leave.

• Competitive 401K and employee benefits.

• Complimentary financial counseling, health coaching, and an employee assistance program.

• Tuition assistance program.

• Flexible work arrangements to suit your needs.

• Effective productivity tools and training.

• Eligibility for an annual incentive program, which is discretionary and based on company, business unit, and individual performance.

• Potential for long-term incentives.

• Possible sales incentives.

• Lincoln’s standard benefits package.