Remote Senior AppSec Engineer – AI/ML & DevSecOps

Lincoln Financial Group; Radnor (Delaware County); Hybrid; USD 120,000 - 193,000; Full time

Job summary

Lincoln Financial Group in Radnor, PA seeks an experienced security engineer to protect applications and services, focusing on secure design and code reviews across the SDLC. The role requires deep expertise in web app security, Agile/DevSecOps, and AI/ML security considerations.

You will assess AI/ML security, identify vulnerabilities, and collaborate with development and infrastructure teams to remediate findings.

Qualifications

• Undergraduate degree or 4+ years of comparable work experience.
• 5-7+ years of IT experience aligned with responsibilities.
• Extensive experience in web application security.
• Strong knowledge of security throughout the SDLC.
• Experience with agile delivery practices.
• Experience integrating security into DevOps practices.
• Experience conducting source code reviews preferred.
• Experience using static application security testing tools (Fortify, Checkmarx, Veracode, etc.).
• Experience dynamic analysis with tools such as AppScan, WebInspect, BurpSuite, and OWASP ZAP, etc.
• Familiarity with network infrastructure (firewalls, WAFs, IPS).
• Familiarity with DMZ architectures.
• Agile mindset; awareness/understanding of Agile methodologies.

Responsibilities

• Secure Lincoln Financial applications and services.
• Perform design review, code review, and dynamic analysis.
• Evaluate security posture of AI/ML systems, including LLM-integrated apps, RAG pipelines, and agentic workflows.
• Identify, communicate, and drive remediation of vulnerabilities.
• Serve as SME for development and infrastructure teams.
• Communicate effectively with varied technical levels.
• Conduct security assessments of web and mobile apps.
• Research and advocate for new security solutions and technologies.
• Stay current on security trends, vulnerabilities, and testing methods.
• Contribute to policies, standards, and supporting documentation.

Skills

IT security experience

Web application security

SDLC security

Agile delivery

DevSecOps integration

Source code review

SAST tools (Fortify, Checkmarx, Verac

Dynamic testing tools (AppScan, WebIns

Network security fundamentals

DMZ architectures

Agile mindset

Education

Bachelor's degree or 4+ years in IT related field

Tools

Fortify

Checkmarx

Veracode

AppScan

WebInspect

BurpSuite

OWASP ZAP

Job description

Lincoln Financial Group in Radnor, PA seeks an experienced security engineer to protect applications and services, focusing on secure design and code reviews across the SDLC. The role requires deep expertise in web app security, Agile/DevSecOps, and AI/ML security considerations.

You will assess AI/ML security, identify vulnerabilities, and collaborate with development and infrastructure teams to remediate findings.