Senior Security Engineer

The Hartford is seeking a Senior Security Engineer to lead AI driven cyber security initiatives within the Enterprise Cyber Focal Office. This role focuses on applying advanced AI and machine learning solutions across application security, vulnerability management, and enterprise resilience, with a hybrid in office schedule in Charlotte, NC; Columbus, OH; or Hartford, CT.

Responsibilities

• Act as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating security strategy into scalable, high impact technical solutions.
• Design and deploy complex cyber solutions that leverage AI and ML to enhance threat detection, vulnerability management, risk prioritization, and automation.
• Oversee end to end solution architecture for cyber platforms and tooling, including design reviews, implementation, and operational readiness.
• Apply full stack application development expertise to deliver secure, resilient, and high performing cyber applications and services.
• Architect and deliver cloud native solutions on AWS, following well engineered security principles.
• Hands on AI/ML work, with a preference for GCP, to build and operationalize intelligent security capabilities such as analytics, anomaly detection, automation, and decision support.
• Collaborate with data, AI, and platform teams to ensure solutions are scalable, secure, and production ready.
• Demonstrate hands on experience with enterprise security, logging, and monitoring platforms such as Splunk, Dynatrace, Orca Security, and Akamai to drive threat detection and observability at scale.
• Leverage expertise in security telemetry, application logging, and runtime monitoring to design and optimize application level security across the enterprise.
• Utilize GitHub Copilot as a productivity and quality accelerator for secure software development while maintaining enterprise security standards.
• Own and lead application vulnerability management, including tooling, integrations, automation, and remediation workflows.
• Partner with the CISO and Engineering organization to modernize vulnerability intake, prioritization, and reporting using AI and data driven techniques.
• Embed vulnerability remediation within SDLC and CI/CD pipelines in collaboration with application teams.
• Serve as a trusted partner to Security, Platform, Reliability, and Software Engineers to enable secure and resilient delivery of applications.
• Define and promote application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.
• Influence engineering teams through standards and reference architectures with practical guidance rather than mandates.
• Provide technical leadership to offshore engineering teams, including design guidance, code reviews, mentoring, and delivery oversight.
• Ensure high engineering quality, operational stability, and adherence to security and compliance standards.
• Contribute to roadmap planning, prioritization, and ongoing improvement of cyber platforms and capabilities.

Requirements

• Six plus years of experience in cyber focused application development with time in technical leadership roles.
• Proven security oriented application development experience across frontend, backend, APIs and integrations, including modern frameworks such as Angular, React, or Vue.js with CSP and XSS prevention, and Node.js or NestJS using security modules like Helmet, Jose, and express-validator.
• Proven track record designing and delivering enterprise scale cyber, security, or application platforms.
• Experience leading distributed or offshore technical teams, and working with logging and monitoring tools such as Splunk, Dynatrace, Akamai, or similar.
• Ability to operate as a trusted partner and influencer across Cyber, Engineering, and Infrastructure groups.
• Experience across logging and monitoring, edge and application security, AI assisted development, ITSM workflows, CI/CD pipelines, and automated deployment platforms to sustain scalable and secure engineering practices.
• Knowledge of application security, vulnerability management, and secure SDLC practices is preferred.
• Expertise in API design (REST or GraphQL), database technologies (SQL and NoSQL), and cloud native development on Azure or AWS. A full stack tech lead is proficient in CI/CD, infrastructure as code, containerization (Docker, Kubernetes), and secure coding with hands on experience integrating security, logging, monitoring, and performance tools.
• Strong problem solving, system level thinking, and ability to collaborate across product, security, and operations teams.
• Extensive hands on experience with AWS cloud architecture and related services. Demonstrated AI/ML implementation experience with a preference for GCP (Vertex AI, BigQuery, ML pipelines or equivalent).
• Authorization to work in the United States without company sponsorship is required.

Technologies

• AWS, GCP, Vertex AI, BigQuery, Azure
• Frontend frameworks: Angular, React, Vue.js
• Backend & Security: Node.js, NestJS, Helmet, Jose, express-validator
• API design: REST, GraphQL
• Databases: SQL, NoSQL
• Cloud and DevOps: Docker, Kubernetes, CI/CD, Infrastructure as Code
• Security and Observability: Splunk, Dynatrace, Orca Security, Akamai
• AI/ML tooling and platforms: Vertex AI, BigQuery, AI/ML pipelines
• Code assistance: GitHub Copilot

Benefits

• Short term or annual bonuses
• Long term incentives
• On the spot recognition

Required Certifications

• One or more security certifications focused on application security (examples include CSPM, CSSM, CISSP, CISM, CSSLP, CCSP, CompTIA, ISC2, GIAC, EC Council)
• One or more cloud security certifications, such as AWS Certified Security Specialty and Google Professional Cloud Security Engineer

Preferred Certifications

• AI or ML certifications from AWS, GCP, or equivalent
• Additional AWS certifications such as Solutions Architect or DevOps Engineer

Compensation

The listed base pay range reflects market analysis for similar roles. Actual base pay may vary based on factors including performance, skills, and demonstrated competencies. The base pay is one component of The Hartford's total compensation package, which may also include short term or annual bonuses, long term incentives, and on the spot recognition. The Hartford is an Equal Opportunity Employer and considers applicants without regard to sex, race, color, veterans status, disability, sexual orientation, gender identity or expression, religion, or age.