Lead Information Security Engineer

Reinsurance Group of America, Incorporated • Remote, Minnesota, United States of America, MN

2d • $126,710 - $188,840 • Remote

About The Position

RGA is a purpose-driven global reinsurance company focused primarily on life- and health-related solutions. The Lead Information Security Engineer leads the design and delivery of security data engineering and intelligence capabilities that integrate, correlate, enrich, and operationalize data across security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms. The role builds governed, reusable data products and analytics to improve risk prioritization, remediation effectiveness, control visibility, and measurement of security outcomes.

This hands-on technical lead provides direction for small and complex cross-functional initiatives, mentors technical staff, and partners with leaders, control owners, remediation teams, Enterprise Data Platform teams, and other stakeholders. The position helps define, build, validate, and communicate trusted KPIs, KRIs, control-effectiveness measures, and outcome-based metrics that support accountability and measurable risk reduction. It also establishes reusable data foundations for security automation and future AI-enabled and Model Context Protocol-based capabilities.

Requirements

• Bachelor’s degree in Arts/Sciences (BA/BS) or equivalent experience.
• At least 6 years of experience in security engineering, information systems, data engineering, security analytics, application development, or a closely related discipline, including significant hands-on security technical delivery.
• Demonstrated experience leading technical projects or small project teams, guiding solution design, mentoring others, and driving work through delivery.
• Strong information security knowledge and ability to work with vulnerability, exposure, cloud, application, endpoint, identity, governance, and control data.
• Experience defining and operationalizing KPIs, KRIs, control measures, and outcome-based metrics, including calculation logic, thresholds, targets, ownership, and validation.
• Working knowledge of governed data-product practices, including role-based access, lineage, metadata, data quality, ownership, and secure data sharing.
• Experience with security analytics, business intelligence, dashboard development, data visualization, and executive or operational reporting.
• Advanced hands-on skill with Python, SQL, APIs, data modeling, databases, and automated data pipelines.
• Experience building analytical models, pipelines, or data products on Snowflake, an enterprise data platform, or a comparable cloud data ecosystem.
• Experience designing, developing, deploying, and operating applications or data services in AWS or another major cloud platform.
• Advanced oral and written communication skills, including explaining complex technical and risk concepts to leaders, control owners, engineers, and remediation teams.
• Advanced ability to translate business and security needs into maintainable technical solutions, measurable outcomes, and actionable recommendations.
• Advanced investigative, analytical, problem-solving, stakeholder-management, change-management, negotiation, and influence skills.
• Ability to balance strategic architecture with hands-on engineering, manage competing priorities, and operate effectively with limited direction.
• Ability to work effectively across technical, operational, risk, governance, and business functions.

Nice To Haves

• Master’s degree in Arts/Sciences (MA/MS) or a relevant professional industry certification.
• CISSP, CISA, CCSP, CGRC, CompTIA CASP+, OSCP, or CEH certification.
• Experience managing and developing security data products, analytics, reporting, or metrics within a governed enterprise data environment.
• Experience with Snowflake, dbt, Airflow, Atlan, Power BI, Git-based development workflows, infrastructure as code, CI/CD, containers, or serverless application patterns.
• Experience with security platforms such as Wiz, GitHub Advanced Security, GitGuardian, CrowdStrike, Tenable, Nucleus, LogicGate, or comparable technologies.
• Knowledge of exposure management, vulnerability prioritization, risk-based remediation, security program measurement, and control-effectiveness reporting.
• Experience with AI-enabled integrations, automation, or Model Context Protocol.
• Relevant cloud, security, data engineering, analytics, or architecture certifications.

Responsibilities

• Lead complex security data engineering initiatives and small cross-functional project teams, providing technical direction from solution design through implementation and operational ownership.
• Ingest and integrate data from security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms using scalable pipelines, applications, APIs, and automation.
• Deduplicate, correlate, and enrich security findings with asset, ownership, business, control, and risk context.
• Design and deliver governed security data products through RGA’s Enterprise Data Platform using Snowflake and enterprise data-engineering patterns.
• Develop and optimize Snowflake data models, SQL transformations, queries, and compute patterns while managing data quality, performance, access, traceability, and cost.
• Partner with Enterprise Data Platform, Data Governance, and security teams to establish sustainable ingestion, transformation, role-based access, lineage, metadata, data-quality, and lifecycle practices.
• Co-develop KPIs, KRIs, control-effectiveness measures, thresholds, targets, and calculation methodologies aligned with security strategy, risk objectives, and technical standards.
• Establish metric governance through documented definitions, authoritative data sources, ownership, data-quality checks, refresh cadence, version control, and traceability to risks, controls, and remediation workflows.
• Communicate metrics to leaders, control owners, and remediation teams, translating technical results into clear risk narratives and connecting executive indicators to accountable teams and actions.
• Develop tool-agnostic dashboards, scorecards, reporting capabilities, and reusable services with drill-through to supporting assets, controls, findings, and remediation work.
• Identify trends, systemic risks, exposure concentrations, control gaps, and remediation opportunities, and provide recommendations to technical teams and leadership.
• Build data foundations for security automation and future AI-enabled and Model Context Protocol-based capabilities.
• Mentor associates, establish engineering standards, guide design and peer reviews, and provide training and knowledge sharing.
• Evaluate security, data, and analytics technologies and recommend solutions that maximize business value while reducing manual effort and unnecessary vendor dependency.
• Communicate architecture, tradeoffs, delivery status, risks, and recommendations to technical teams, leaders, and business stakeholders.

Benefits

• Annual bonus plan that includes all roles.
• Some positions are eligible for participation in a long-term equity incentive plan.
• A full range of health, retirement, and other employee benefits.
• Opportunity to gain knowledge and experience from diverse colleagues around the world.
• Respectful, welcoming environment that fosters individuality and encourages pioneering thought.
• Career potential and global opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior