Lead Application Security Engineer

Lead Application Security Engineer

The Lead Application Security Engineer is responsible for working with application development and infrastructure teams to ensure applications are designed, coded, and implemented securely. You will be responsible for integrating security best practices and controls into all phases of the Software Development Lifecycle (SDLC), including requirements, design, development, testing, deployment, and maintenance. You will drive the improvement of policies, standards, and other supporting documentation. This is a hands-on technical position that you will find yourself collaborating with multiple groups across the organization. Strong communication skills are needed to explain complex security to a wide variety of technical levels. Experience as a developer is helpful, but not required.

Responsibility for the security of Lincoln Financial applications and services

Conduct design review, code review, and dynamic analysis

Evaluate the security posture of AI/ML systems, including LLM-integrated applications, RAG pipelines, and agentic workflows

Identify, communicate, and drive the resolution of vulnerabilities

Serve as a subject matter expert for application development and infrastructure teams

Communicate effectively with a wide variety of technical levels

Perform security assessments of web and mobile applications

Research and advocate for new security solutions and technologies

Stay current on security trends, vulnerabilities, and testing methods

Contribute to related policies, standards, and supporting documentation

Must Haves:

• Undergraduate degree or 4+ years of comparable work experience
• 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position
• Extensive experience in web application security
• Strong knowledge of application security throughout the SDLC
• Experience with agile delivery practices
• Experience integrating security into DevOps practices
• Experience conducting source code review preferred
• Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc.
• Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc.
• Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS
• Familiarity with common DMZ architectures
• Prior financial services experience preferred
• Agile Mindset; awareness/understanding of Agile methodologies

Nice to Haves:

• OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET

Application Deadline: Applications will be accepted through October 31, 2026, and the posting may be taken down early due to applicant volume.

At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.

The pay range for this position is $120,375 - $192,600 with anticipated pay for new hires between the minimum and midpoint of the range and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.

Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services. With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.

Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.

Lincoln is committed to creating an inclusive environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.