Security Engineer

Texas Mutual•Austin, TX

5d•Hybrid

About The Position

The Security Engineer designs, builds, and operates security solutions that protect sensitive customer and business data across digital platforms, applications, infrastructure, and emerging technologies. The role collaborates with DevOps, IT, Product, Application, Enterprise Architecture, Infrastructure & Operations, Program Management, and Security Operations teams to embed security throughout the technology lifecycle and insurance product delivery. The role supports secure adoption and use of AI technologies and uses AI, automation, and orchestration to enhance security capabilities, accelerate workflows, improve detection and response, and reduce manual effort. The Security Engineer also participates in security incident response and an on-call rotation for timely investigation and response to high-priority events. Texas Mutual offers a flex-hybrid work environment, with remote work and office collaboration based on business needs. Employees must reside in Texas and travel to their designated office as needed.

Requirements

Bachelor’s degree in computer science, cybersecurity, CIS/MIS, database administration, or equivalent industry experience in a related field, or an equivalent combination of education, training, and experience.
CompTIA Security+ certification.
At least two years in security engineering or five years in engineering roles within IT, DevOps, application development, cloud engineering, or cybersecurity operations.
Strong understanding of network, application, API, identity, and cloud security principles.
Experience with DevSecOps and implementing security guardrails in CI/CD pipelines.
Experience with scripting and automation using technologies such as JavaScript, Python, JSON, YAML, PowerShell, Bash, APIs, or workflow automation platforms.
Knowledge of AI security concepts, generative AI technologies, large language models (LLMs), AI agents, and security risks associated with enterprise AI adoption.

Nice To Haves

AWS Solution Architect, AWS Security Specialty, or equivalent certification.
Experience using AI-assisted technologies or automation to enhance cybersecurity processes, engineering workflows, security operations, or incident response.

Responsibilities

Design and implement technical security controls across cloud, on-premises, and hybrid environments.
Support secure architecture and security reviews for applications, APIs, third-party integrations, and AI-enabled solutions.
Integrate security into CI/CD pipelines and automate security testing using SAST, DAST, SCA, secrets detection, and other security tooling.
Analyze infrastructure and application vulnerabilities and drive risk-based remediation plans.
Perform threat modeling for insurance systems, claims platforms, applications, APIs, cloud services, and AI-enabled workloads.
Ensure infrastructure as code follows security best practices and compliance controls.
Deploy and manage security controls in Azure, AWS, and hybrid cloud environments.
Contribute to audits, risk assessments, and technical security documentation.
Provide security oversight for complex integrations and high-risk system design, including third-party, SaaS, AI/ML, generative AI, and customer payment environments.
Advise engineering and development teams on secure design patterns, controls, automation, and risk mitigation strategies.
Evaluate and implement security controls for AI systems, including generative AI, AI agents, models, APIs, data flows, and associated third- and fourth-party services.
Use AI and automation to improve security engineering and operational workflows, including alert enrichment, event triage, investigation, vulnerability and threat analysis, remediation, reporting, and incident response.
Participate in the Information Security on-call rotation and respond to escalated security alerts and incidents requiring timely investigation, containment, remediation, or coordination with internal teams and security service providers.
Use automation and AI-assisted capabilities, where appropriate, to improve incident response, enrich alerts, prioritize events by risk, and reduce repetitive manual investigation while maintaining appropriate human oversight.
Maintain thorough documentation of security processes, configurations, incident response procedures, automation workflows, and work tickets.