Security Engineer - App & Cloud Risk Leader (Remote)

Old Republic; United States; Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Remote work

Job summary

Old Republic is seeking a technically strong Security Engineer reporting to the Business Information Security Officer. This remote role will drive security and compliance initiatives across the organization and its operating companies, aligning with enterprise policies and regulatory requirements.

You will assess applications, review architecture, identify risk, and help OpCos implement enterprise security solutions while collaborating with IT, development, and business leadership.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 6+ years in cybersecurity, security architecture, or related field.
• Experience assessing risks and advising stakeholders.
• Knowledge of OWASP Top 10, API security, and secure SDLC.
• Ability to translate risks into practical security requirements.

Responsibilities

• Participate in security design reviews, risk assessments, architecture reviews, and threat modeling.
• Assess new applications, SaaS/cloud services, and third parties to identify risks and controls.
• Act as a security advisor to OpCos and stakeholders.
• Translate policies and risk findings into practical security requirements and design recommendations.
• Support vulnerability remediation, audits, and security initiatives across OpCos.

Skills

Cybersecurity experience

Security architecture

Application security

Cloud security

Threat modeling

Vulnerability management

Data protection

Security operations concepts

Education

Bachelor’s degree in Information Security or related field

Tools

SAST

DAST

SCA

Cloud security tooling

Job description

Old Republic is seeking a technically strong Security Engineer reporting to the Business Information Security Officer. This remote role will drive security and compliance initiatives across the organization and its operating companies, aligning with enterprise policies and regulatory requirements.

You will assess applications, review architecture, identify risk, and help OpCos implement enterprise security solutions while collaborating with IT, development, and business leadership.