Intermediate Cyber Security Engineer

Transamerica Corporation; Cedar Rapids (IA); Hybrid; USD 70,000 - 84,000; Full time

Benefits offered by this job

Bonus for Eligible Employees

401k Match

Employee Stock Purchase Plan

Paid Time Off

Job summary

Transamerica is seeking a multi-talented Intermediate Cyber Security Engineer to join its Security team in a hybrid role with three in-office days per week at Cedar Rapids or Denver hubs. The position focuses on application security, vulnerability management, and SDLC security enhancements across on-prem and cloud environments.

The candidate should have 1–3 years in cyber security engineering, strong reporting skills, and experience with tools like Rapid7, Snyk, and ServiceNow VR.

Qualifications

• 1 to 3 years cyber security engineering work experience.
• Experience with application security domains: secure coding, SDLC, SAST/DAST, API security.
• Knowledge of frameworks such as NIST CSF.
• Certifications desirable - OSCP, CISSP, CEH, and/or CompTIA Security+/CySA/CASP+.
• Experience with vulnerability management systems (Rapid7, ServiceNow VR, Snyk, CrowdStrike, etc.).
• Experience with ServiceNow, JIRA.
• Ability to fluently read, write and speak English.
• Strong background in creating and automating vulnerability reports and dashboards.

Responsibilities

• Identify weaknesses and vulnerabilities aligning with industry best practices and regulatory standards.
• Gather and analyze data, draft reports, and create dashboards and indicators.
• Build relationships with peers, stakeholders, and business partners.
• Review vulnerabilities across diverse technologies, including on-premise and cloud.
• Support safeguarding information and technology to protect privacy and data.
• Assist secure SDLC practices, SAST/DAST, remediation tracking, and coordination with teams.
• Research and implement information security initiatives and improvements.
• Automate vulnerability lifecycle processes including prioritization and reporting.
• Promote secure coding practices and secure SDLC awareness.

Skills

Cyber security engineering

Application security

Vulnerability management

English fluency

Security testing

Education

Bachelor’s degree in CS/MIS/Business

Tools

Rapid7

ServiceNow VR

Snyk

JIRA

Job description

Job Family IT - General About Us At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment — one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there. Who We Are We believe everyone deserves to live their best life. More than a century ago, we were among the first financial services companies in America to serve everyday people from all walks of life. Today, we’re part of an international holding company, with millions of customers and thousands of employees worldwide. Our insurance, retirement, and investment solutions help people make the most of what’s important to them. We’re empowered by a vast agent network covering North America, with diversity to match. Together with our nonprofit research institute and foundation, we tune in, step up, and are a force for good — for our customers and the communities where we live, work, and play. United in our purpose, we help people create the financial freedom to live life on their terms.

What We Do

Transamerica is organized into three distinct businesses. These include 1) World Financial Group, including Transamerica Financial Advisors, 2) Protection Solutions and Savings & Investments, comprised of life insurance, annuities, employee benefits, retirement plans, and Transamerica Investment Solutions, and 3) Financial Assets, which includes legacy blocks of long term care, universal life, and variable and fixed annuities. These are supported by Transamerica Corporate, which includes Finance, People and Places, General Counsel, Risk, Internal Audit, Strategy and Development, and Corporate Affairs, which covers Communications, Brand, and Government and Policy Affairs. Transamerica employs nearly 7,000 people. It’s part of Aegon, an integrated, diversified, international financial services group serving approximately 23.9 million customers worldwide.* For more information, visit transamerica.com.

Job Description Summary

Enterprise Technology is a global organization within Transamerica. We provide dedicated application support to Transamerica, and we bring all of Aegon’s business units together through the use of technology. We provide the backbone - the infrastructure - for how everything works. We’re creating the company’s AI environment, building a flexible ‘cloud experience’ for internal hosting services, designing frameworks for data governance and management, and ensuring the security and stability of the company’s technology. In short, we enable the business units to move more quickly and deliver to our clients in the best possible way. Whether customers are interested in insurance products or annuities or financial services, we're here to ensure they don't have to worry whether their information is safe. The people we employ are incredibly diverse, both in terms of backgrounds and skill sets. There are over 1000 of us representing a dozen or so nationalities and located in the UK, the US, the Netherlands, Hungary, Spain, and Hong Kong. Our global teams are comprised of experts in areas such as application development, information security, infrastructure services, data & analytics, risk & controls, procurement, program management, and architecture. With the breadth of functions within Enterprise Technology, individuals can pursue a wide variety of careers, and we have a focus on supporting employees’ development. The most important quality in the people who join us is curiosity. A lot of what we do is problem solving, requiring colleagues to take what they know and apply it to new situations. We have many mature processes, but we’re always looking for opportunities to improve, so we want people who are naturally inquisitive and confident enough to challenge the way we do things. Technology is constantly, rapidly changing – we need you to help us continue to change with it.

Job Description Summary

Security is foundational to Transamerica, and we are growing our Information Security Team. We are looking for a multi-talented Intermediate Cyber Security Engineer. We are a fast-paced energetic team dedicated to making our enterprise more secure. So, if you have at least 1-3 years cyber experience, are an exceptional team player, willing to learn, and have knowledge in the application security space; come join our industry leading, global organization.

Job Description Responsibilities

• Identify weaknesses and vulnerabilities in relation to industry best practices and provide support to the application of security frameworks and regulatory standards such as NIST CFS
• Gather and analyze data, draft reports, and create departmental, project, key indicator, and dashboard materials.
• Build strong working relationships with peers and key stakeholders, including business partners, legal, internal audit, risk, and technology specialists.
• Review security vulnerabilities across diverse technologies and rapid changing environments including on premise and cloud infrastructure.
• Supports the analysis, implementation, and management of administrative, technical and physical safeguards to ensure the privacy and protection of company information and supporting technology and services
• Support application security activities by assisting with secure SDLC practices, static and dynamic application security testing, vulnerability validation, remediation tracking, and coordination with development and technology teams to reduce application risk.
• Assist in the research, development and implementation of information security initiatives, such as policy, program, process, procedural and technology improvements and solutions
• Enhance and automate the vulnerability management lifecycle, including intake, prioritization, remediation tracking, reporting, and continuous process improvement.
• Serve as an application security ambassador by promoting secure coding practices, helping employees and contractors understand their role in reducing application risk, and providing practical guidance on secure SDLC requirements, vulnerability identification, testing expectations, remediation activities, and safe handling of application data.

Qualifications

• Bachelor’s degree with emphasis in Computer Science, MIS, Auditing, Finance, or Business or equivalent education and experience required.
• 1 to 3 years of cyber security engineering work experience required.
• Experience with one or more application security domain areas, including secure coding, security within the SDLC, application threat modeling, static and dynamic application security testing, software composition analysis, API security, web application firewalls (WAF), container security, vulnerability validation and remediation, application data protection, and alignment with applicable security standards and control frameworks.
• Knowledge of applicable control frameworks such as: NIST CSF
• Certifications desirable - OSCP, CISSP, CEH and/or CompTIA Security+/CySA/CASP+.
• Strong foundation in core security technologies and advanced persistent threat (APT) controls, including SIEM, endpoint security platforms, firewalls, intrusion detection and prevention systems, data loss prevention, syslog servers, vulnerability scanners, web application firewalls, threat intelligence feeds, digital forensics, and application allowlisting.
• Security in Software Development Life Cycle (SDLC) 2-3 years of related work experience with application security
• Working knowledge of one or more vulnerability management systems including Rapid7, ServiceNow Vulnerability Response (VR), Synk, CrowdStrike, etc.
• Hands‑on experience with application security, dynamic scanning, static scanning, and container security
• Experience with systems such as ServiceNow, JIRA or equivalent
• Ability to fluently read, write and speak English
• Strong background in creating and automating vulnerability reports and dashboards including trending and graphing data

Preferred Qualifications

• Certifications desirable - OSCP, CISSP, CEH and/or CompTIA Security+/CySA/CASP+.
• Experience in Insurance, Financial Services or other Fin-Tech Industries
• Preference given to candidates with Transamerica products, systems and/or domain knowledge

Working Conditions

Office Environment Occasional Travel <10% International travel may be required.

Compensation

The Salary for this position generally ranges between $70,000 - $84,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law. Additionally, this position is typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at the Company’s discretion. Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time. This is a hybrid position requiring three days in office per week in our Denver or Cedar Rapids hub location. Relocation assistance will not be provided for this position. This job description is not a contract of employment nor for any specific job responsibilities. The Company may change, add to, remove, or revoke the terms of this job description at its discretion. Managers may assign other duties and responsibilities as needed. In the event an employee or applicant requests or requires an accommodation to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request.

What We Offer

For eligible employees, we offer a comprehensive benefits package designed to support both the personal and financial well-being of our employees.

• Competitive Pay
• Bonus for Eligible Employees
• Benefits Package Pension Plan 401k Match Employee Stock Purchase Plan Tuition Reimbursement Disability Insurance Medical Insurance Dental Insurance Vision Insurance Employee Discounts Career Training & Development Opportunities Health and Work/Life Balance Benefits Paid Time Off starting at 160 hours annually for employees in their first year of service.
• Ten (10) paid holidays per year (typically mirroring the New York Stock Exchange (NYSE) holidays).
• Be Well Company holistic wellness program, which includes Wellness Coaching and Reward Dollars Parental Leave – fifteen (15) days of paid parental leave per calendar year to eligible employees with at least one year of service at the time of birth, placement of an adopted child, or placement of a foster care child.
• Adoption Assistance
• Employee Assistance Program
• Back-Up Care Program
• PTO for Volunteer Hours
• Employee Matching Gifts Program
• Employee Resource Groups Inclusion and Diversity Programs Employee Recognition Program Referral Bonus Programs Inclusion & Diversity

We believe our commitment to diversity and inclusion creates a work environment filled with exceptional individuals. We’re thrilled to have been recognized for our efforts through the Human Rights Campaign Corporate Equality Index, Dave Thomas Adoption Friendly Advocate, and several Seramount lists, including the Inclusion Index, 100 Best Companies for Working Parents, Best Companies for Dads, and Top 75 Companies for Executive Women.

To foster a culture of inclusivity throughout our workforce, workplace, and marketplace, Transamerica offers a wide range of diversity and inclusion programs. This includes our company-sponsored, employee-driven Employee Resource Groups (ERGs), which are formed around a shared interest or a common characteristic of diversity. ERGs are open to all employees. They provide a supportive environment to help us better appreciate our similarities and differences and understand how they benefit us all.

Giving Back We believe our responsibilities extend beyond our corporate walls. That's why we created the Aegon Transamerica Foundation in 1994. Through a mix of financial grants and the volunteer efforts of our employees, the foundation supports nonprofit organizations focused on the things that matter most to our people in the communities where we live and work.

Transamerica’s Parent Company

Aegon acquired the Transamerica business in 1999. Since its start in 1844, Aegon has grown into an international company serving more than 23.9 million people across the globe.* It offers investment, protection, and retirement solutions, always with a clear purpose: Helping people live their best lives. As a leading global investor and employer, the company seeks to have a positive impact by addressing critical environmental and societal issues, with a focus on climate change and inclusion and diversity.

As of December 31, 2023 At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential unleashed by leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment — one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there.

Transamerica is a part of Aegon, an integrated, diversified, international financial services group. The Aegon companies employ over 21,500 people and have approximately 31.7 million customers.* For more information, visit www.transamerica.com. * As of December 31, 2022 For more information about Transamerica’s privacy practices, click here.