Note: The job is a remote job and is open to candidates in USA. Reinsurance Group of America is a Fortune 200 company focused on life- and health-related solutions. The Lead Application Security Engineer will help reduce risk across the application portfolio by partnering with teams, coordinating external penetration tests, and implementing security tooling.
Responsibilities
- Coordinate external penetration tests (scoping, scheduling, access, and logistics) across multiple application teams
- Partner with application owners to triage findings, validate impact, and prioritize remediation based on risk and business context
- Operate, tune, and maintain SAST and SCA tooling (rulesets, baselines, false-positive management, and integrations) to improve signal-to-noise
- Run and configure DAST scanning and validate results with engineering teams, including safe testing practices and environment coordination
- Implement and operate secrets scanning across source control and CI/CD, and partner on prevention patterns (rotation, vaulting, and developer guidance)
- Integrate findings into ticketing and SDLC workflows, define SLAs, and track remediation progress to closure with clear ownership
- Create lightweight standards, guidance, and enablement so application teams can remediate faster without security becoming a blocker
Skills
- Bachelor's Degree in Arts/Sciences (BA/BS) or equivalent experience
- 6+ years in application security, product security, or software engineering with a security focus
- Experience coordinating and/or consuming third-party penetration tests and translating results into actionable remediation plans
- Strong hands-on skill with Terraform, Python, Bash, and CI/CD (Jenkins or equivalent)
- Hands-on experience running and configuring SAST, DAST, SCA, and secrets scanning in CI/CD or adjacent workflows
- Strong understanding of common web and API vulnerabilities (e.g., OWASP Top 10) and practical remediation strategies
- Comfort with Git-based workflows, build pipelines, and issue tracking; able to work with engineers where they are
- Ability to communicate risk clearly and drive alignment on prioritization and timelines with application owners and stakeholders
- Advanced oral and written communication skills demonstrating ability to share and impart knowledge
- Ability to quickly adapt to new methods, work under tight deadlines and stressful conditions
- Ability to appropriately balance priorities, deadlines, and deliverables
- Advanced ability to set goals and handle multiple tasks, clients, and projects simultaneously
- Advanced investigative, analytical and problem solving skills
- Ability to work well within a team environment and participate in department/team projects
- Advanced skills in customer relationship management and change management
- Advanced negotiating and persuasion skills
- Master's degree in Arts/Sciences (MA/MS) or professional industry certification
Benefits
- Annual bonus plan that includes all roles
- Some positions are eligible for participation in our long-term equity incentive plan
- Full range of health, retirement, and other employee benefits
Company Overview
Company H1B Sponsorship