Senior AppSec & Incident-Response Lead — Hybrid

RLI Insurance Company; Chicago (IL); Hybride; USD 96 000 - 138 000; Plein temps

Avantages offerts par ce poste

Hybrid work arrangements

Paid time off

Employee stock ownership plan (ESOP)

Training & certification opportunities

Tuition reimbursement

Résumé du poste

RLI Insurance Company is seeking a Senior Information Security Analyst to join its security team in Chicago. The role focuses on improving security operations, enhancing vulnerability management, and automating repeatable tasks.

You will work closely with software developers to translate security findings into actionable remediation and help manage risk across applications and cloud environments. The ideal candidate brings hands-on experience in vulnerability management, security operations, and

Qualifications

• Typically requires a Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field preferred.
• Typically requires 5+ years of relevant information security experience or an equivalent combination of education and experience.
• Demonstrated experience in vulnerability management or application security, along with hands‑on security operations or incident response experience.
• Experience working with software development teams. Experience using scripting, APIs, or other automation to improve security workflows.
• Relevant certifications such as CISSP, GIAC, CSSLP, OSCP, Microsoft security certifications, or equivalent are preferred.

Responsabilités

• Lead application-focused vulnerability management and help technology teams move findings from identification through validated remediation.
• Translate penetration test, application security, dependency, and vulnerability findings into clear, developer-actionable remediation guidance.
• Prioritize vulnerabilities using severity, exploitability, application criticality, data sensitivity, exposure, and business risk.
• Build reusable remediation patterns, templates, examples, and technical guidance for recurring application vulnerabilities.
• Analyze vulnerability trends to identify recurring root causes.
• Partner with development leadership and product teams to improve remediation expectations, time-to-fix, and fix-rate outcomes.
• Validate remediation and support documented risk acceptance when remediation is not feasible within required timelines.
• Support penetration testing, security assessments, and technical risk assessments.

Connaissances

Vulnerability management

Application security

SIEM

Incident response

Scripting/Automation

Dev collaboration

Cloud security concepts

Formation

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field

Outils

GitLab

GitHub

Azure DevOps

Security scanning tools

Description du poste

RLI Insurance Company is seeking a Senior Information Security Analyst to join its security team in Chicago. The role focuses on improving security operations, enhancing vulnerability management, and automating repeatable tasks.

You will work closely with software developers to translate security findings into actionable remediation and help manage risk across applications and cloud environments. The ideal candidate brings hands-on experience in vulnerability management, security operations, and