Lead Information Security Engineer

This is a fully remote position, open to applicants in Minnesota.

📋 Description

• Oversee the design and execution of intricate security data engineering projects as well as manage small cross-functional project teams.

• Offer technical guidance throughout the entire process, from solution design to implementation and operational management.

• Gather and integrate data from various sources including security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms.

• Remove duplicates, correlate, and enhance security findings with context related to assets, ownership, business, controls, and risks.

• Create and deliver governed security data products leveraging RGA’s Enterprise Data Platform utilizing Snowflake.

• Design and optimize data models, SQL transformations, queries, and compute patterns within Snowflake.

• Oversee data quality, performance, access, traceability, and cost management.

• Implement practices for ingestion, transformation, role-based access, lineage, metadata, data quality, and lifecycle management.

• Collaborate in the development of KPIs, KRIs, control-effectiveness metrics, thresholds, targets, and calculation methods.

• Establish governance for metrics with clear definitions, authoritative sources, ownership, validation processes, refresh schedules, version control, and traceability.

• Engage with leaders, control owners, and remediation teams to promote metrics.

• Create dashboards, scorecards, reporting capabilities, and reusable services with the ability to drill down to assets, controls, findings, and remediation efforts.

• Identify trends, systemic risks, exposure concentrations, control weaknesses, and opportunities for remediation.

• Build foundational data structures to support security automation and capabilities based on AI and Model Context Protocol.

• Provide mentorship to technical staff, set engineering standards, guide design and peer evaluations, and facilitate training.

• Assess security, data, and analytics technologies, providing solution recommendations.

• Communicate architecture, trade-offs, delivery progress, risks, and suggestions to both technical and business stakeholders.

⛳️ Requirements

• Bachelor’s degree in Arts/Sciences (BA/BS) or equivalent professional experience.

• Over 6 years of experience in security engineering, information systems, data engineering, security analytics, application development, or a closely related field, including significant hands-on technical security delivery.

• Proven experience leading technical projects or small project teams, guiding solution design, mentoring peers, and driving delivery processes.

• Extensive knowledge of information security across various domains, including vulnerability, exposure, cloud, application, endpoint, identity, governance, and control data.

• Experience in defining and operationalizing KPIs, KRIs, control measures, and outcome-based metrics.

• Familiarity with best practices for governed data products, including role-based access, lineage, metadata, data quality, ownership, and secure data sharing.

• Proficient in security analytics, business intelligence, dashboard creation, data visualization, and both executive and operational reporting.

• Advanced hands-on skills in Python, SQL, APIs, data modeling, databases, and automated data pipelines.

• Experience in constructing analytical models, pipelines, or data products on Snowflake, an enterprise data platform, or a similar cloud data ecosystem.

• Background in designing, developing, deploying, and managing applications or data services in AWS or another major cloud environment.

• Exceptional oral and written communication abilities.

• Strong aptitude for translating business and security requirements into sustainable technical solutions and measurable results.

• Advanced skills in investigation, analysis, problem-solving, stakeholder management, change management, negotiation, and influence.

• Capacity to balance strategic architecture with hands-on engineering, managing competing priorities effectively.

• Ability to collaborate across technical, operational, risk, governance, and business functions.

• Preferred: Master’s degree or relevant professional industry certification.

• Preferred certifications: CISSP, CISA, CCSP, CGRC, CompTIA CASP+, OSCP, CEH.

• Preferred familiarity with Snowflake, dbt, Airflow, Atlan, Power BI, Git-based development workflows, infrastructure as code, CI/CD, containers, or serverless application patterns.

• Preferred experience with security platforms such as Wiz, GitHub Advanced Security, GitGuardian, CrowdStrike, Tenable, Nucleus, LogicGate, or similar technologies.

• Preferred knowledge in exposure management, vulnerability prioritization, risk-based remediation, security program measurement, and control-effectiveness reporting.

• Preferred experience with AI-enabled integrations, automation, or Model Context Protocol.

• Preferred relevant certifications in cloud, security, data engineering, analytics, or architecture.

🏝️ Benefits

• Annual bonus plan.

• Eligibility for a long-term equity incentive plan for certain positions.

• Comprehensive health benefits.

• Retirement benefits.

• Additional employee benefits.

• Opportunities for learning and collaboration with diverse colleagues globally.

• A respectful and welcoming environment that promotes individuality and innovative thinking.

• Career growth potential and global opportunities.

• AI-driven personalized job recommendations, interview scheduling, and chatbot assistance during preliminary screenings.