Remote AppSec Engineer - SDLC Security Lead

Lincoln Financial Group; United States; Remote; USD 120,000 - 193,000; Full time

Benefits offered by this job

PTO/ parental leave

401K with company match

Tuition assistance

Job summary

Lincoln Financial Group is seeking a Lead Application Security Engineer to collaborate with development and infrastructure teams to embed security into the Software Development Lifecycle (SDLC). This hands-on role drives security policy, standards, and documentation, and partners across the organization to strengthen secure design, coding, and testing practices.

The role emphasizes communicating complex security concepts to diverse audiences, evaluating AI/ML security postures, and staying

Qualifications

• Undergraduate degree or 4+ years of comparable work experience.
• 5-7+ years of IT experience aligned with the role responsibilities.
• Extensive experience in web application security.
• Strong knowledge of application security throughout the SDLC.
• Experience with agile delivery practices.
• Experience integrating security into DevOps practices.
• Experience conducting source code reviews preferred.
• Experience with static application security testing tools (Fortify, Checkmarx, Veracode).
• Experience with dynamic analysis tools (AppScan, WebInspect, BurpSuite, OWASP ZAP).
• Familiarity with network infrastructure (firewalls, WAFs, IPS).
• Familiarity with DMZ architectures.
• Prior financial services experience preferred.
• Agile mindset and familiarity with Agile methodologies.

Responsibilities

• Own security of Lincoln Financial applications and services.
• Conduct design, code, and dynamic analysis reviews.
• Evaluate security posture of AI/ML systems, including LLM-integrated apps and RAG pipelines.
• Identify and drive remediation of vulnerabilities.
• Serve as SME for development and infrastructure teams.
• Communicate security concepts to varied technical audiences.
• Perform security assessments of web and mobile apps.
• Research and advocate new security solutions and technologies.
• Stay current on security trends and testing methods.
• Contribute to policies, standards, and supporting documentation.

Skills

Web security

SDLC security

Agile practices

DevOps security

Code review

Security testing tools

Tools

Fortify

Checkmarx

Veracode

AppScan

BurpSuite

OWASP ZAP

Job description

Lincoln Financial Group is seeking a Lead Application Security Engineer to collaborate with development and infrastructure teams to embed security into the Software Development Lifecycle (SDLC). This hands-on role drives security policy, standards, and documentation, and partners across the organization to strengthen secure design, coding, and testing practices.

The role emphasizes communicating complex security concepts to diverse audiences, evaluating AI/ML security postures, and staying