Security Engineer

Texas Mutual Insurance Company•Austin, TX

8d•$102,485 - $126,600•Hybrid

About The Position

The Security Engineer designs, builds, and operates security solutions that protect sensitive customer and business data across digital platforms, applications, infrastructure, and emerging technologies. The role collaborates with DevOps, IT, Product, Application, Enterprise Architecture, Infrastructure & Operations, Program Management, and Security Operations teams to embed security throughout the technology lifecycle and insurance product delivery. The position supports the secure adoption and use of AI technologies and applies AI, automation, and orchestration to improve security capabilities, accelerate workflows, enhance detection and response, and reduce manual operational effort. The Security Engineer also participates in security incident response and an on-call rotation for timely investigation and response to high-priority events.

Requirements

Bachelor’s degree in computer science, cybersecurity, CIS/MIS, database administration, or equivalent industry experience in a related field; an equivalent combination of education, training, and experience is also accepted.
Required CompTIA Security+ certification.
At least two years in security engineering or five years in engineering roles within IT, DevOps, application development, cloud engineering, or cybersecurity operations.
Strong understanding of network, application, API, identity, and cloud security principles.
Experience with DevSecOps and implementing security guardrails in CI/CD pipelines.
Experience with scripting and automation using technologies such as JavaScript, Python, JSON, YAML, PowerShell, Bash, APIs, or workflow automation platforms.
Knowledge of AI security concepts, generative AI technologies, large language models (LLMs), AI agents, and security risks associated with enterprise AI adoption.

Nice To Haves

AWS Solution Architect, AWS Security Specialty, or equivalent certification.
Experience using AI-assisted technologies or automation to enhance cybersecurity processes, engineering workflows, security operations, or incident response.

Responsibilities

Design and implement technical security controls across cloud, on-premises, and hybrid environments.
Support secure architecture and security reviews for applications, APIs, third-party integrations, and AI-enabled solutions.
Integrate security into CI/CD pipelines and automate security testing using SAST, DAST, SCA, secrets detection, and other security tools.
Analyze infrastructure and application vulnerabilities and drive risk-based remediation plans.
Perform threat modeling for insurance systems, claims platforms, applications, APIs, cloud services, and AI-enabled workloads.
Ensure infrastructure as code (IaC) follows security best practices and compliance controls.
Deploy and manage security controls in Azure, AWS, and hybrid cloud environments.
Contribute to audits, risk assessments, and technical security documentation.
Provide security oversight for complex integrations and high-risk system designs, including third-party, SaaS, AI/ML and generative AI workloads, and customer payment environments.
Provide engineering and development teams with technical security guidance on secure design patterns, controls, automation, and risk mitigation.
Evaluate and implement security controls for AI systems, including generative AI, AI agents, models, APIs, data flows, and associated third- and fourth-party services.
Use AI and automation to improve security engineering and operational workflows, including alert enrichment, event triage, investigation, vulnerability analysis, threat analysis, remediation, reporting, and incident response.
Participate in the Information Security on-call rotation and respond to escalated alerts and incidents requiring timely investigation, containment, remediation, or coordination with internal teams and security service providers.
Use AI-assisted capabilities and automation where appropriate to improve incident response speed, enrich alerts, prioritize events by risk, and reduce repetitive manual investigation while maintaining appropriate human oversight.
Maintain thorough documentation of security processes, configurations, incident response procedures, automation workflows, and work tickets to support operational transparency, audit readiness, and knowledge transfer.