Application Security Engineer

Company: Lincoln Financial Group
Location: Honolulu
Posted on: November 19, 2023

Job Description:

Alternate Locations: Work from Home
Work Arrangement:
Hybrid/Flexible : Work at home and use the office as appropriate for in-person collaboration.
Relocation assistance: is not available for this opportunity.
Requisition #: 72530
The Role at a Glance
We're excited to add an Application Security Engineer positions to our Application Security team!
Background Details:---
This person will be responsible for working with application development and infrastructure teams to ensure applications are designed, coded, and implemented in a secure manner that meets the requirements of LFG Security policies and standards. The analyst will drive the improvement of policies, standards, and other supporting documentation. This is a hands-on technical position that you will find yourself collaborating with multiple groups across the organization. Strong communication skills are needed to explain complex security to a wide variety of technical levels. Experience as a developer is helpful, but not required.
What you'll be doing

• 
  
• 
  Responsible for the security of LFG applications and services
  
  
• 
  Perform complex security assessments of web and mobile applications
  
  
• 
  Perform infrastructure and application design reviews
  
  
• 
  Perform static and dynamic analysis tasks
  
  
• 
  Review and ensure the implementation of adequate application authentication, authorization, and access control and encryption practices
  
  
• 
  Manually assess applications for vulnerabilities created by incorrect business logic implementations and other potential vulnerabilities that are not typically identified with the use of automated tools
  
  
• 
  Evaluate, recommend, and implement application security related software in an automated continuous integration/deployment environment.
  
  
• 
  Identify, communicate, and drive the resolution of vulnerabilities
  
  
• 
  Serve as a subject matter expert for application development and infrastructure teams
  
  
• 
  Communicate effectively with a wide variety of technical levels
  
  
• 
  Research and advocate for new security solutions and technologies
  
  
• 
  Stay current on security trends, vulnerabilities, and testing methods
  
  
• 
  Contribute to related policies, standards, and supporting documentation
  
  
  What we're looking for
  Must-haves:
  
  • 
    
  • 
    3-5 years of experience in Information Technology that directly aligns with the specific responsibilities for this position
    
    
  • 
    Extensive experience in web application security
    
    
  • 
    Strong knowledge of application security throughout the SDLC
    
    
  • 
    Experience with agile delivery practices
    
    
  • 
    Familiarity with enterprise network infrastructure
    
    
  • 
    Familiarity with common DMZ architectures
    
    
  • 
    Experience integrating security into DevOps practices.
    
    
  • 
    Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc.
    
    
  • 
    Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc.
    
    
    Nice-to-haves:
    
    • 
      
    • 
      1-3+ years of Penetration Testing experience (Preferred)
      
      
    • 
      Experience conducting source code review preferred
      
      
    • 
      OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET (Preferred)Familiarity with container security scanning platforms like Twistcli
      
      
    • 
      Agile Mindset; awareness/understanding of Agile methodologies
      
      
      What's it like to work here?
      At Lincoln Financial Group, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.
      What's in it for YOU:
      
      • 
        
      • 
        A clearly defined career framework to help you successfully manage your career
        
        
      • 
        Leadership development and virtual training opportunities
        
        
      • 
        PTO/parental leave
        
        
      • 
        Competitive 401K and employee benefits (https://hrdirectdocs.lfg.com/misc/HR/Recruiting/BenefitsResourcesGuide.pdf)
        
        
      • 
        Free financial counseling, health coaching and employee assistance program
        
        
      • 
        Tuition assistance program
        
        
      • 
        A leadership team that prioritizes your health and well-being; offering a remote work environment and flexible work hybrid situations
        
        
      • 
        Effective productivity/technology tools and training
        
        
        Pay Range: $75,701 - $140,700
        Actual base pay could vary based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.
        About The Company
        Lincoln Financial Group helps people to plan, protect and retire with confidence. As of Dec. 31, 2022, approximately 16 million customers trust our guidance and solutions across four core businesses - annuities, life insurance, group protection and retirement plan services. As of September 30, 2023, the company had $290 billion in end-of-period account balances, net of reinsurance. Headquartered in Radnor, Pa., Lincoln Financial Group is the marketing name for Lincoln National Corporation (NYSE: LNC) and its affiliates. Learn more at LincolnFinancial.com.
        Lincoln is committed to creating a diverse and inclusive (https://www.lfg.com/public/aboutus/companyoverview/diversityinclusion?audience_page_id=1422918942386) environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
        Follow us on Facebook (http://www.facebook.com/lincolnfinancialgroup) , Twitter (https://mobile.twitter.com/lincolnfingroup) , LinkedIn (https://www.linkedin.com/company/4307?trkInfo=tas%3Alincoln+financial%2Cidx%3A3-1-3&trk=tyah) , and Instagram (https://www.instagram.com/lincolnfingroup/) . Sign up for email alerts at http://newsroom.lfg.com
        Be Aware of Fraudulent Recruiting Activities
        If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.
        Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at fraudhotline@lfg.com if you encounter a recruiter or see a job opportunity that seems suspicious.
        Additional Information
        This position may be subject to Lincoln's Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln's current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.
        Any unsolicited resumes/candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial Group are considered property of Lincoln Financial Group and are not subject to payment of agency fees.
        Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling 260-455-2558.
        This Employer Participates in E-Verify. See the E-Verify (https://www.e-verify.gov) notices.
        Este Empleador Participa en E-Verify. Ver el E-Verify (https://www.e-verify.gov/es) avisos.
        Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.

Keywords: Lincoln Financial Group, Honolulu , Application Security Engineer, Engineering , Honolulu, Hawaii