Senior Security Engineer

Responsibilities

• Serve as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high impact technical solutions.
• Design, build, and implement complex cyber solutions that leverage AI and ML to improve threat detection, vulnerability management, risk prioritization, and automation.
• Drive end-to-end solution architecture, including design reviews, implementation, and operational readiness for cyber platforms and tooling.
• Apply full‑stack application development expertise to deliver secure, resilient, and performant cyber applications and services.
• Architect and deliver solutions on AWS, following cloud-native, well‑architected, and security-first principles.
• Hands-on AI/ML work (GCP preferred) to build and operationalize intelligent cyber capabilities such as analytics, anomaly detection, automation, and decision support.
• Collaborate with data, AI, and platform teams to ensure solutions are scalable, secure, and production-ready.
• Demonstrate hands-on experience with enterprise security, logging, and monitoring platforms (e.g., Splunk, Dynatrace, Orca Security, Akamai), using these tools to drive threat detection, observability, and risk reduction at scale.
• Apply deep expertise in security telemetry, application logging, and runtime monitoring to design, integrate, and optimize application level security and observability enterprise-wide.
• Utilize GitHub Copilot as a productivity and quality accelerator for secure software development, including scaffolding, refactoring, test generation, and documentation, while upholding security standards.
• Own and lead application vulnerability management, including tooling, integrations, automation, and remediation workflows.
• Partner with the CISO (THIP) and Engineering teams to modernize and automate vulnerability intake, prioritization, and reporting using AI and data-driven techniques.
• Embed vulnerability remediation into SDLC and CI/CD pipelines in collaboration with application teams.
• Act as a trusted partner to Security, Platform, Reliability and Software Engineers to enable secure, reliable, and resilient delivery.
• Define, promote, and enforce application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.
• Influence engineering teams through technical standards, reference architectures, and practical guidance rather than mandates.
• Provide technical leadership to an offshore engineering team, including design guidance, code reviews, mentoring, and delivery oversight.
• Ensure high engineering quality, operational stability, and adherence to enterprise security and compliance standards.
• Contribute to roadmap planning and the continuous improvement of cyber platforms and capabilities.

Requirements

• 6+ years of experience in cyber-focused application development (security engineering), including technical leadership roles.
• Strong security application development experience across frontend, backend, APIs, and integrations, with proficiency in Angular, React, or Vue.js and a focus on CSP and XSS prevention; Node.js or NestJS with security modules such as Helmet, Jose, and express-validator.
• Proven track record designing and delivering enterprise-scale cyber, security, or application platforms.
• Experience leading and mentoring distributed or offshore technical teams, utilizing Splunk, Dynatrace, Akamai or related logging platforms.
• Ability to operate as a trusted partner and influencer across Cyber, Engineering, and Infrastructure organizations.
• Experience across logging and monitoring, edge and application security, AI-assisted development, ITSM workflows, CI/CD pipelines, and automated deployment platforms to promote scalable, secure engineering practices.
• Knowledge of application security, vulnerability management, and secure SDLC practices is preferred.
• Expertise in API design (REST/GraphQL), SQL and NoSQL databases, and cloud-native development on Azure or AWS; full-stack leadership with CI/CD, infrastructure-as-code, containers (Docker, Kubernetes), and secure coding, with hands-on integration of security, logging, monitoring, and performance tools.
• Strong problem-solving skills, systems thinking, and ability to collaborate across product, security, and operations teams to deliver scalable and secure applications.
• Extensive hands-on experience with AWS cloud architecture and related services; demonstrated hands-on AI/ML implementation experience with a preference for GCP (Vertex AI, BigQuery, ML pipelines).
• Authorized to work in the US without company sponsorship; STEM OPT sponsorship is not available for this role.

Technologies

• AWS
• GCP
• Vertex AI
• BigQuery
• Azure
• Angular
• React
• Vue.js
• Node.js
• NestJS
• Helmet
• Jose
• express-validator
• REST
• GraphQL
• SQL
• NoSQL
• Docker
• Kubernetes
• GitHub Copilot
• Splunk
• Dynatrace
• Orca Security
• Akamai
• CI/CD pipelines
• Infrastructure as Code

Benefits

• Short-term or annual bonuses
• Long-term incentives
• On-the-spot recognition

Required Certifications

• One or more security certifications focused on application security (for example CSPM, CSSM, CISSP, CISM, CSSLP, CCSP, CompTIA, ISC2, GIAC, EC-Council)
• One or more cloud security certifications, such as AWS Certified Security - Specialty or Google Professional Cloud Security Engineer

Preferred Certifications

• AI / ML Certification (AWS, GCP, or equivalent)
• AWS Certification (Solutions Architect, DevOps Engineer)

Compensation

The annual base pay range is USD 128,400 to 192,600, reflecting external market benchmarks. Actual base pay may vary based on performance, proficiency, and demonstrated competencies. Base pay is part of The Hartford's total compensation package, which may also include short-term or annual bonuses, long-term incentives, and on-the-spot recognition.

The Hartford is an Equal Opportunity Employer/Sex/Race/Color/Veterans/Disability/Sexual Orientation/Gender Identity or Expression/Religion/Age.