Product Security Engineer

Group 1001•Zionsville, IN

1d•Remote

About The Position

Group 1001 is a consumer-centric, technology-driven family of insurance companies focused on outstanding value and operational performance. Its culture emphasizes collaboration, communication, core business focus, risk management, and outcomes. As a Product Security Engineer, you will integrate security best practices throughout the product development lifecycle and help ensure the security and integrity of revenue-generating applications and systems from design through deployment. The role spans application security, cloud security, platform engineering, software engineering, and process improvement. You will partner with development teams to drive secure development practices and deliver security features for end-user and internet-facing applications and systems. The compensation range is $145,000 to $215,000 per year, depending in part on geographic market and job-related knowledge, skills, and experience. Employees who meet benefit eligibility guidelines and work at least 30 hours weekly may enroll in the benefits package. All employees have access to the Employee Assistance Program and wellness programs, and may participate in the company 401(k) plan.

Requirements

Bachelor's degree in computer science or a related field.
At least 5 years of experience in product security, application security, software development, or related fields.
Strong understanding of secure coding practices and common vulnerabilities, such as the OWASP Top 10.
Experience with application security testing tools and technologies, such as SAST, DAST, and SCA.
Proficiency in one or more programming languages, such as Python, JavaScript/TypeScript, Java, Kotlin, or Golang.
Proficiency in one or more infrastructure automation frameworks, such as Terraform or Ansible.
Familiarity with modern platform, API, and application frameworks, such as Kubernetes, ArgoCD, or Apollo GraphQL.
Familiarity with major cloud platforms, such as AWS, Azure, or GCP.
Excellent communication and interpersonal skills, including the ability to collaborate effectively with cross-functional teams.

Responsibilities

Collaborate with development teams to employ, improve, and customize automated security analysis tooling.
Contribute security improvements and features to production applications and supporting infrastructure.
Make developed security features and integrations reusable across engineering teams and their applications.
Conduct security reviews and provide architectural design guidance to address security requirements.
Lead efforts to design security features into product applications and systems rather than adding them as bolt-on implementations.
Stay current on emerging threats and product security best practices.