Intermediate Cyber Security Engineer

Job Description Summary: Security is foundational to Transamerica, and we are growing our Information Security Team. We are looking for a multi-talented Intermediate Cyber Security Engineer. We are a fast-paced energetic team dedicated to making our enterprise more secure. So, if you have at least 1-3 years cyber experience, are an exceptional team player, willing to learn, and have knowledge in the application security space; come join our industry leading, global organization.
Responsibilities
Identify weaknesses and vulnerabilities in relation to industry best practices and provide support to the application of security frameworks and regulatory standards such as NIST CFS
Gather and analyze data, draft reports, and create departmental, project, key indicator, and dashboard materials. Build strong working relationships with peers and key stakeholders, including business partners, legal, internal audit, risk, and technology specialists.
Review security vulnerabilities across diverse technologies and rapid changing environments including on premise and cloud infrastructure. Supports the analysis, implementation, and management of administrative, technical and physical safeguards to ensure the privacy and protection of company information and supporting technology and services
Support application security activities by assisting with secure SDLC practices, static and dynamic application security testing, vulnerability validation, remediation tracking, and coordination with development and technology teams to reduce application risk.
Assist in the research, development and implementation of information security initiatives, such as policy, program, process, procedural and technology improvements and solutions
Enhance and automate the vulnerability management lifecycle, including intake, prioritization, remediation tracking, reporting, and continuous process improvement.
Serve as an application security ambassador by promoting secure coding practices, helping employees and contractors understand their role in reducing application risk, and providing practical guidance on secure SDLC requirements, vulnerability identification, testing expectations, remediation activities, and safe handling of application data.
Qualifications
Bachelor’s degree with emphasis in Computer Science, MIS, Auditing, Finance, or Business or equivalent education and experience required. 1 to 3 years of cyber security engineering work experience required.
Experience with one or more application security domain areas, including secure coding, security within the SDLC, application threat modeling, static and dynamic application security testing, software composition analysis, API security, web application firewalls (WAF), container security, vulnerability validation and remediation, application data protection, and alignment with applicable security standards and control frameworks.
Knowledge of applicable control frameworks such as: NIST CSF
Certifications desirable - OSCP, CISSP, CEH and/or CompTIA Security+/CySA/CASP+.
Strong foundation in core security technologies and advanced persistent threat (APT) controls, including SIEM, endpoint security platforms, firewalls, intrusion detection and prevention systems, data loss prevention, syslog servers, vulnerability scanners, web application firewalls, threat intelligence feeds, digital forensics, and application allowlisting.
Security in Software Development Life Cycle (SDLC)
2-3 years of related work experience with application security
Working knowledge of one or more vulnerability management systems including Rapid7, ServiceNow Vulnerability Response (VR), Synk, CrowdStrike, etc.
Hands-on experience with application security, dynamic scanning, static scanning, and container security
Experience with systems such as ServiceNow, JIRA or equivalent
Ability to fluently read, write and speak English
Strong background in creating and automating vulnerability reports and dashboards including trending and graphing data
Preferred Qualifications
Certifications desirable - OSCP, CISSP, CEH and/or CompTIA Security+/CySA/CASP+.
Experience in Insurance, Financial Services or other Fin-Tech Industries
Preference given to candidates with Transamerica products, systems and/or domain knowledge
Working Conditions
Office Environment
Occasional Travel
International travel may be required
Compensation:
The Salary for this position generally ranges between $70,000 - $84,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law.
Additionally, this position is typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at the Company’s discretion.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.
This is a hybrid position requiring three days in office per week in our Denver or Cedar Rapids hub location. Relocation assistance will not be provided for this position.
Enterprise Technology is a global Aegon/Transamerica organization that enables the business to move quickly and deliver the best possible outcomes for clients, while keeping their information safe and secure.
With more than 1,000 employees across the UK, US, Netherlands, Hungary, Spain, and Hong Kong, Enterprise Technology is a diverse, global team. Our experts work across areas such as application development, information security, infrastructure, data & analytics, risk & controls, program management, and architecture. We offer a wide range of career opportunities and are committed to supporting employee development.
Curiosity is the quality we value most. Much of our work involves solving complex problems, applying knowledge in new ways, and continuously improving how we operate. As technology evolves rapidly, we look for inquisitive people who are confident challenging the status quo and helping us drive change.
This job description is not a contract of employment nor for any specific job responsibilities. The Company may change, add to, remove, or revoke the terms of this job description at its discretion. Managers may assign other duties and responsibilities as needed. In the event an employee or applicant requests or requires an accommodation to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request.
Apply

Work arrangement
No