Lead Application Security Engineer

🔥 2 hours ago

❄️ Minnesota – Remote

❄️ Minnesota – Remote

💵 $126.7k - $188.8k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Reinsurance Group of America, Incorporated

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1973

⚕️ Healthcare Insurance

Insurance • Healthcare Insurance • Financial Services

Reinsurance Group of America, Incorporated (RGA) is a leading global reinsurance company that focuses exclusively on life and health reinsurance solutions. With a strong commitment to providing innovative products and services, RGA helps its clients manage risk and enhance their insurance portfolios through its expertise in underwriting, claims management, and financial solutions. The company operates in multiple global markets, leveraging its extensive data and analytics capabilities to offer tailored solutions that meet the unique needs of the life and health insurance sectors.

📋 Description

• Help reduce risk across our application portfolio by partnering with engineers and product teams • Coordinate external penetration tests (scoping, scheduling, access, logistics) across multiple application teams • Partner with application owners to triage findings, validate impact, and prioritize remediation based on risk and business context • Operate, tune, and maintain SAST and SCA tooling • Run and configure DAST scanning and validate results with engineering teams • Implement and operate secrets scanning across source control and CI/CD • Integrate findings into ticketing and SDLC workflows, define SLAs, and track remediation progress to closure • Create lightweight standards, guidance, and enablement for application teams

🎯 Requirements

• 6+ years in application security, product security, or software engineering with a security focus • Experience coordinating third-party penetration tests and translating findings into actionable remediation plans • Strong hands-on skill with Terraform, Python, Bash, and CI/CD (Jenkins or equivalent) • Hands-on experience running and configuring SAST, DAST, SCA, and secrets scanning in CI/CD or adjacent workflows • Strong understanding of common web and API vulnerabilities (e.g., OWASP Top 10) and practical remediation strategies • Comfort with Git-based workflows, build pipelines, and issue tracking • Advanced oral and written communication skills

🏖️ Benefits

• annual bonus plan • participation in our long-term equity incentive plan • full range of health benefits • retirement plans