Lead Application Security Engineer Job Details | Lincoln Financial

Lincoln Financial is a financial services company seeking a Lead Application Security Engineer to help ensure its applications and services are designed, coded, and implemented securely. The role integrates security practices throughout the software development lifecycle, evaluates AI/ML systems and applications, conducts security assessments, and drives vulnerability remediation and security standards.

Responsibilities:

• Responsibility for the security of Lincoln Financial applications and services
• Conduct design review, code review, and dynamic analysis
• Evaluate the security posture of AI/ML systems, including LLM-integrated applications, RAG pipelines, and agentic workflows
• Identify, communicate, and drive the resolution of vulnerabilities
• Serve as a subject matter expert for application development and infrastructure teams
• Communicate effectively with a wide variety of technical levels
• Perform security assessments of web and mobile applications
• Research and advocate for new security solutions and technologies
• Stay current on security trends, vulnerabilities, and testing methods
• Contribute to related policies, standards, and supporting documentation

Requirements:

• Undergraduate degree or 4+ years of comparable work experience
• 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position
• Extensive experience in web application security
• Strong knowledge of application security throughout the SDLC
• Experience with agile delivery practices
• Experience integrating security into DevOps practices
• Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc
• Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc
• Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS
• Familiarity with common DMZ architectures
• Agile Mindset; awareness/understanding of Agile methodologies
• Experience conducting source code review preferred
• Prior financial services experience preferred
• OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET Preferred