Intermediate Cyber Security Engineer

Transamerica; Cedar Rapids (IA); On-site; USD 70,000 - 110,000; Full time

Job summary

Transamerica is seeking an Intermediate Cyber Security Engineer to strengthen our Information Security Team in Cedar Rapids, IA. You’ll contribute 1–3 years of cyber security experience, focusing on application security, secure SDLC, and vulnerability management across on‑prem and cloud environments.

You will build relationships with partners, perform threat modeling, and promote secure coding practices while helping reduce enterprise risk for our global organization.

Qualifications

• Bachelor's degree in Computer Science, MIS, Auditing, Finance, or Business or equivalent education and experience required.
• 1–3 years of cybersecurity engineering work experience required.
• Experience with application security domains and SDLC security.

Responsibilities

• Identify weaknesses and vulnerabilities and support security frameworks and standards (NIST CSF).
• Analyze data, draft reports, and create dashboards for stakeholders.
• Review vulnerabilities across on‑premise and cloud environments and support remediation.
• Assist with secure SDLC, SAST/DAST, remediation tracking, and coordination with teams.

Skills

Application security

Secure SDLC

Vulnerability management

Security frameworks

Threat modeling

Education

Bachelors in CS/IT/related field

Tools

Rapid7

ServiceNow Vulnerability Response

Job description

About Us

At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests.

Job Family

IT - General

About Us

At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests.

Who We Are

We believe everyone deserves to live their best life. More than a century ago, we were among the first financial services companies in America to serve everyday people from all walks of life.

Today, we're part of an international holding company, with millions of customers and thousands of employees worldwide. Our insurance, retirement, and investment solutions help people make the most of what's important to them.

We're empowered by a vast agent network covering North America, with diversity to match. Together with our nonprofit research institute and foundation, we tune in, step up, and are a force for good - for our customers and the communities where we live, work, and play. United in our purpose, we help people create the financial freedom to live life on their terms.

What We Do

Transamerica is organized into three distinct businesses. These include 1) World Financial Group, including Transamerica Financial Advisors, 2) Protection Solutions and Savings & Investments, comprised of life insurance, annuities, employee benefits, retirement plans, and Transamerica Investment Solutions, and 3) Financial Assets, which includes legacy blocks of long term care, universal life, and variable and fixed annuities. These are supported by Transamerica Corporate, which includes Finance, People and Places, General Counsel, Risk, Internal Audit, Strategy and Development, and Corporate Affairs, which covers Communications, Brand, and Government and Policy Affairs.

Transamerica employs nearly 7,000 people. It's part of Aegon, an integrated, diversified, international financial services group serving approximately 23.9 million customers worldwide.* For more information, visit transamerica.com.

Job Description Summary

Job Description Summary:

Security is foundational to Transamerica, and we are growing our Information Security Team. We are looking for a multi-talented Intermediate Cyber Security Engineer. We are a fast-paced energetic team dedicated to making our enterprise more secure. So, if you have at least 1-3 years cyber experience, are an exceptional team player, willing to learn, and have knowledge in the application security space; come join our industry leading, global organization.

Responsibilities

Job Description

• Identify weaknesses and vulnerabilities in relation to industry best practices and provide support to the application of security frameworks and regulatory standards such as NIST CFS


• Gather and analyze data, draft reports, and create departmental, project, key indicator, and dashboard materials. Build strong working relationships with peers and key stakeholders, including business partners, legal, internal audit, risk, and technology specialists.


• Review security vulnerabilities across diverse technologies and rapid changing environments including on premise and cloud infrastructure. Supports the analysis, implementation, and management of administrative, technical and physical safeguards to ensure the privacy and protection of company information and supporting technology and services


• Support application security activities by assisting with secure SDLC practices, static and dynamic application security testing, vulnerability validation, remediation tracking, and coordination with development and technology teams to reduce application risk.


• Assist in the research, development and implementation of information security initiatives, such as policy, program, process, procedural and technology improvements and solutions


• Enhance and automate the vulnerability management lifecycle, including intake, prioritization, remediation tracking, reporting, and continuous process improvement.


• Serve as an application security ambassador by promoting secure coding practices, helping employees and contractors understand their role in reducing application risk, and providing practical guidance on secure SDLC requirements, vulnerability identification, testing expectations, remediation activities, and safe handling of application data.

Qualifications

• Bachelor’s degree with emphasis in Computer Science, MIS, Auditing, Finance, or Business or equivalent education and experience required. 1 to 3 years of cyber security engineering work experience required.


• Experience with one or more application security domain areas, including secure coding, security within the SDLC, application threat modeling, static and dynamic application security testing, software composition analysis, API security, web application firewalls (WAF), container security, vulnerability validation and remediation, application data protection, and alignment with applicable security standards and control frameworks.


• Knowledge of applicable control frameworks such as: NIST CSF


• Certifications desirable - OSCP, CISSP, CEH and/or CompTIA Security+/CySA/CASP+.


• Strong foundation in core security technologies and advanced persistent threat (APT) controls, including SIEM, endpoint security platforms, firewalls, intrusion detection and prevention systems, data loss prevention, syslog servers, vulnerability scanners, web application firewalls, threat intelligence feeds, digital forensics, and application allowlisting.


• Security in Software Development Life Cycle (SDLC)


• 2-3 years of related work experience with application security


• Working knowledge of one or more vulnerability management systems including Rapid7, ServiceNow Vulnerability Response