Senior Security Engineer

Group 1001

1d • Remote

About The Position

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001’s culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets – our employees. Why This Role Matters: As a Senior Security Engineer, you will design, operationalize, and mature the organization’s Data Protection, AI/MCP Security, and SaaS Application Security programs. This is a hands-on engineering role focused on delivering durable controls, platform integrations, and measurable risk reduction. Your primary focus will be managing and supporting the full data protection stack: Data Classification & Labeling, DSPM, Endpoint & Network DLP, SSPM, and the governance technologies and concepts that tie them together. You will own these capabilities end-to-end, from initial selection and implementation to optimization and maturity. As AI capabilities continue to evolve, you will investigate and implement the right approaches to secure AI solution adoption in a well-governed manner. This means staying current on emerging "secure AI" practices, partnering closely with the Identity and Access Management team, and leveraging your development experience to fill gaps when vendor solutions fall short. With SaaS platforms increasingly underpinning core business processes, you will evaluate how these systems are integrated, assess the effectiveness of native security capabilities, and identify gaps requiring third-party controls, particularly across identity management, API usage, data movement, and auditability. You will operate at both strategic and execution layers, translating risk signals and investigative findings into practical security controls, detection logic, and response workflows. Success in this role requires strong engineering judgment, analytical rigor, and the ability to communicate clearly with both technical and non-technical stakeholders.

Requirements

• Bachelor’s degree in computer science, information security, or related technical field.
• 8+ years of experience in security engineering, detection engineering, or adjacent security disciplines.
• Experience with traditional data protection methodologies and security platforms: DSPM, DLP, Data Governance, Data Labeling & Tagging, watermarking, canary tokens, etc.
• Experience securing SaaS environments, including identity, API access, logging, and third-party risk.

Responsibilities

• Evaluate, implement, and optimize data protection platforms and controls
• Configure and mature security control frameworks aligned to business risk
• Implement and maintain integrations across security and enterprise platforms
• Establish onboarding and lifecycle processes for security tools and vendor integrations
• Drive continuous improvement using metrics and outcome-based risk reduction
• Enhance SaaS security posture management and monitoring capabilities through platform optimization
• Evaluate and implement vendor solutions for AI platform security and data protection

Benefits

• Employees who meet benefit eligibility guidelines and work 30 hours or more weekly, have the ability to enroll in Group 1001’s benefits package.
• Employees (and their families) are eligible to participate in the Company’s comprehensive health, dental, and vision insurance plan options.
• Employees are also eligible for Basic and Supplemental Life Insurance, Short and Long-Term Disability.
• All employees (regardless of hours worked) have immediate access to the Company’s Employee Assistance Program and wellness programs—no enrollment is required.
• Employees may also participate in the Company’s 401K plan, with matching contributions by the Company.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level