Lead Application Security Engineer

Lincoln Financial Group; United States; Remote; USD 120,000 - 193,000; Full time

Benefits offered by this job

PTO/ parental leave

401K with company match

Tuition assistance

Job summary

Lincoln Financial Group is seeking a Lead Application Security Engineer to collaborate with development and infrastructure teams to embed security into the Software Development Lifecycle (SDLC). This hands-on role drives security policy, standards, and documentation, and partners across the organization to strengthen secure design, coding, and testing practices.

The role emphasizes communicating complex security concepts to diverse audiences, evaluating AI/ML security postures, and staying

Qualifications

• Undergraduate degree or 4+ years of comparable work experience.
• 5-7+ years of IT experience aligned with the role responsibilities.
• Extensive experience in web application security.
• Strong knowledge of application security throughout the SDLC.
• Experience with agile delivery practices.
• Experience integrating security into DevOps practices.
• Experience conducting source code reviews preferred.
• Experience with static application security testing tools (Fortify, Checkmarx, Veracode).
• Experience with dynamic analysis tools (AppScan, WebInspect, BurpSuite, OWASP ZAP).
• Familiarity with network infrastructure (firewalls, WAFs, IPS).
• Familiarity with DMZ architectures.
• Prior financial services experience preferred.
• Agile mindset and familiarity with Agile methodologies.

Responsibilities

• Own security of Lincoln Financial applications and services.
• Conduct design, code, and dynamic analysis reviews.
• Evaluate security posture of AI/ML systems, including LLM-integrated apps and RAG pipelines.
• Identify and drive remediation of vulnerabilities.
• Serve as SME for development and infrastructure teams.
• Communicate security concepts to varied technical audiences.
• Perform security assessments of web and mobile apps.
• Research and advocate new security solutions and technologies.
• Stay current on security trends and testing methods.
• Contribute to policies, standards, and supporting documentation.

Skills

Web security

SDLC security

Agile practices

DevOps security

Code review

Security testing tools

Tools

Fortify

Checkmarx

Veracode

AppScan

BurpSuite

OWASP ZAP

Job description

Alternate Locations

Work from Home; Charlotte, NC (North Carolina); Fort Wayne, IN (Indiana); Greensboro, NC (North Carolina); Radnor, PA (Pennsylvania)

Work Arrangement

Remote : Work at home employee residing outside of a commutable distance to an office location.

Relocation assistance

is not available for this opportunity.

Requisition #: 76525

The Role at a Glance

The Lead Application Security Engineer is responsible for working with application development and infrastructure teams to ensure applications are designed, coded, and implemented securely. You will be responsible for Integrating security best practices and controls into all phases of the Software Development Lifecycle (SDLC), including requirements, design, development, testing, deployment, and maintenance.

You will drive the improvement of policies, standards, and other supporting documentation. This is a hands-on technical position that you will find yourself collaborating with multiple groups across the organization. Strong communication skills are needed to explain complex security to a wide variety of technical levels. Experience as a developer is helpful, but not required.

What you'll be doing

• Responsibility for the security of Lincoln Financial applications and services
• Conduct design review, code review, and dynamic analysis
• Evaluate the security posture of AI/ML systems, including LLM-integrated applications, RAG pipelines, and agentic workflows
• Identify, communicate, and drive the resolution of vulnerabilities
• Serve as a subject matter expert for application development and infrastructure teams
• Communicate effectively with a wide variety of technical levels
• Perform security assessments of web and mobile applications
• Research and advocate for new security solutions and technologies
• Stay current on security trends, vulnerabilities, and testing methods
• Contribute to related policies, standards, and supporting documentation

What we’re looking for

Must Haves

• Undergraduate degree or 4+ years of comparable work experience
• 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position
• Extensive experience in web application security
• Strong knowledge of application security throughout the SDLC
• Experience with agile delivery practices
• Experience integrating security into DevOps practices.
• Experience conducting source code review preferred
• Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc.
• Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc.
• Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS
• Familiarity with common DMZ architectures
• Prior financial services experience preferred
• Agile Mindset; awareness/understanding of Agile methodologies

Nice to Haves

• OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET Preferred

Application Deadline

Applications will be accepted through October 31, 2026, and the posting may be taken down early due to applicant volume.

What's it like to work here?

At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.

What's in it for you

• Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
• Leadership development and virtual training opportunities
• PTO/parental leave
• Competitive 401K and employee benefits
• Free financial counseling, health coaching and employee assistance program
• Tuition assistance program
• Work arrangements that work for you
• Effective productivity/technology tools and training

The pay range for this position is $120,375 - $192,600 with anticipated pay for new hires between the minimum and midpoint of the range and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.

About The Company

Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services.

With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.

Lincoln Financial Distributors, a broker-dealer, is the wholesale distribution organization of Lincoln Financial. Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.

Lincoln is committed to creating an inclusive environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Lincoln Financial ("Lincoln" or "the Company") is an Equal Opportunity employer and, as such, committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex, age, national origin or disability. Opportunities throughout Lincoln are available to employees and applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling [phone].

This Employer Participates in E-Verify. See the E-Verify notices.

Este Empleador Participa en E-Verify. Ver el E-Verify avisos.