Lead Application Security Engineer
About The Position
The Lead Application Security Engineer is responsible for working with application development and infrastructure teams to ensure applications are designed, coded, and implemented securely. You will be responsible for Integrating security best practices and controls into all phases of the Software Development Lifecycle (SDLC), including requirements, design, development, testing, deployment, and maintenance. You will drive the improvement of policies, standards, and other supporting documentation. This is a hands-on technical position that you will find yourself collaborating with multiple groups across the organization. Strong communication skills are needed to explain complex security to a wide variety of technical levels. Experience as a developer is helpful, but not required.
Requirements
- Undergraduate degree or 4+ years of comparable work experience
- 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position
- Extensive experience in web application security
- Strong knowledge of application security throughout the SDLC
- Experience with agile delivery practices
- Experience integrating security into DevOps practices
- Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc.
- Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc.
- Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS
- Familiarity with common DMZ architectures
- Agile Mindset; awareness/understanding of Agile methodologies
Nice To Haves
- Experience conducting source code review preferred
- Prior financial services experience preferred
- OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET Preferred
Responsibilities
- Responsibility for the security of Lincoln Financial applications and services
- Conduct design review, code review, and dynamic analysis
- Evaluate the security posture of AI/ML systems, including LLM-integrated applications, RAG pipelines, and agentic workflows
- Identify, communicate, and drive the resolution of vulnerabilities
- Serve as a subject matter expert for application development and infrastructure teams
- Communicate effectively with a wide variety of technical levels
- Perform security assessments of web and mobile applications
- Research and advocate for new security solutions and technologies
- Stay current on security trends, vulnerabilities, and testing methods
- Contribute to related policies, standards, and supporting documentation
Benefits
- Relocation assistance: is not available for this opportunity.
- PTO/parental leave
- Competitive 401K and employee benefits
- Free financial counseling, health coaching and employee assistance program
- Tuition assistance program
- Work arrangements that work for you
- Effective productivity/technology tools and training
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Associate degree
