Designs, builds, and improves the cybersecurity controls protecting an insurance company's information assets — owning security architecture, deploying tools like firewalls, IDS/IPS, SIEM, and EDR, leading incident response and vulnerability management, and translating regulations such as GLBA and PCI-DSS into technical controls.
This position is responsible for designing, building, and improving the security controls that protect the organization’s information assets. The role owns security architecture decisions, evaluates and deploys security technologies, leads incident investigations, and sets the technical standards that the broader technology team operates against. This role requires deep technical expertise across enterprise security domains, sound risk judgment, and the ability to work collaboratively across various departments.
Essential Duties and Responsibilities include the following. Other duties may be assigned.
Security Architecture and Engineering: Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), Security Information and Event Management (SIEM) solutions, endpoint detection and response, email security, and identity protection. Evaluate and select new security technologies, define configuration standards, and produce the reference designs that security operations staff administer against.
Threat Detection and Incident Response: Lead the investigation, containment, and resolution of security incidents. Build and tune detection content, correlation rules, and automated response actions. Develop and maintain the Incident Response Plan, conduct periodic tabletop exercises and drills, and produce post-incident reports with assigned corrective actions.
Vulnerability and Risk Management: Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards. Coordinate third-party penetration tests and validate remediation. Perform threat modeling and security design reviews for new systems and significant changes.
AI and Emerging Technology Security: Perform security design reviews of AI services, models, agents, and integrations. Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging. Support the AI governance program with technical assessments and control recommendations.
Automation and Engineering Practices: Build automation and integrations that reduce manual security effort, including scripting, API integrations between security platforms, and configuration as code where applicable.
Project Management: Lead medium to large projects related to improving overall cybersecurity posture. Define scope, sequence work, and coordinate delivery across technical teams. Projects will be prioritized based on impact and cost assessment.
Compliance and Auditing: Translate regulatory requirements (e.g., GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, state regulations) into technical control designs. Support internal and external security audits and collaborate across internal teams on compliance and audit-related activities.
Documentation and Technical Leadership: Build and maintain the security architecture documentation, configuration standards, and engineering runbooks. Provide technical direction to security operations staff and serve as the escalation point for complex security issues.