Senior Security Engineer

Senior Security Engineer in Hartford, CT (hybrid) within The Hartford's Enterprise Cyber Focal Office, offering USD 128,400 - 192,600 per year.

Responsibilities

• Act as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high impact technical solutions.
• Design and implement sophisticated cyber solutions that use AI/ML to enhance threat detection, vulnerability management, risk prioritization, and automation.
• Oversee end-to-end solution architecture, including design reviews, deployment, and readiness of cyber platforms and tooling.
• Apply full‑stack development expertise to deliver secure, resilient, and high‑performing cyber applications and services.
• Design and deliver cloud solutions on AWS, adhering to cloud-native, well‑architected, and security‑first principles.
• Conduct hands‑on AI/ML work (GCP preferred) to build and operate intelligent cyber capabilities such as analytics, anomaly detection, automation, and decision support.
• Collaborate with data, AI, and platform teams to ensure solutions are scalable, secure, and production‑ready.
• Bring hands‑on experience with enterprise security, logging, and monitoring platforms (eg, Splunk, Dynatrace, Orca Security, Akamai) to drive threat detection, observability, and risk reduction at scale.
• Apply deep expertise in security telemetry, application logging, and runtime monitoring to design, integrate, and optimize application security and observability enterprise‑wide.
• Leverage GitHub Copilot as a productivity and quality accelerator for secure software development, including scaffolding, refactoring, test generation, and documentation, while upholding security standards.
• Own and lead application vulnerability management from a technical perspective, covering tooling, integrations, automation, and remediation workflows.
• Partner with the CISO (THIP) and Engineering organization to modernize and automate vulnerability intake, prioritization, and reporting using AI and data‑driven techniques.
• Collaborate with application teams to embed vulnerability remediation into SDLC and CI/CD pipelines.
• Act as a trusted partner to Security, Platform, Reliability, and Software Engineering teams to enable secure, reliable, and resilient application delivery.
• Define, promote, and enforce best practices for application security, including secure coding, dependency management, secrets handling, logging, and monitoring.
• Influence engineering teams through technical standards, reference architectures, and hands‑on guidance rather than mandates.
• Provide technical leadership to an offshore engineering team, including design guidance, code reviews, mentoring, and delivery oversight.
• Ensure high engineering quality, operational stability, and adherence to enterprise security and compliance standards.
• Contribute to roadmap planning, prioritization, and ongoing improvement of cyber platforms and capabilities.

Requirements

• Minimum 6+ years of experience in cyber focused application development with prior technical leadership roles.
• Proven security oriented application development across frontend, backend, APIs, and integrations, with proficiency in modern frameworks and languages such as Angular, React, or Vue.js, implementing CSP and XSS protections; experience with Node.js or NestJS using Helmet, Jose, and express‑validator.
• Demonstrated success designing and delivering enterprise‑scale cyber, security, or application platforms.
• Experience leading and mentoring distributed/offshore technical teams, using Splunk, Dynatrace, Akamai or similar logging and event platforms.
• Ability to operate as a trusted partner and influencer across Cyber, Engineering, and Infrastructure organizations.
• Experience across logging and monitoring, edge and application security, AI‑assisted development, ITSM workflows, CI/CD pipelines, and automated deployment platforms, ensuring scalable, secure, and repeatable engineering practices.
• Knowledge of application security, vulnerability management, and secure SDLC practices is preferred.
• Expertise in API design (REST/GraphQL), SQL and NoSQL databases, and cloud‑native development on Azure or AWS; a full‑stack tech lead skilled in CI/CD, infrastructure‑as‑code, containerization (Docker, Kubernetes), and secure coding, with hands‑on experience integrating security, logging, monitoring, and performance tools.
• Strong problem solving, system‑level thinking, and ability to collaborate across product, security, and operations teams to deliver scalable, resilient, and secure applications.
• Deep hands‑on experience with AWS cloud architecture and related services; demonstrable AI/ML implementation experience with GCP preferred (Vertex AI, BigQuery, ML pipelines or equivalent).
• Authorized to work in the United States without company sponsorship; STEM OPT I‑983 Training Plan endorsement is not offered for this position.

Technologies

• AWS
• GCP
• Azure
• Vertex AI
• BigQuery
• Kubernetes
• Docker
• Node.js
• NestJS
• Angular
• React
• Vue.js
• Helmet
• Jose
• express-validator
• Splunk
• Dynatrace
• Akamai
• Orca Security
• GitHub Copilot
• REST
• GraphQL
• SQL
• NoSQL

Required Certifications

• Security certifications focused on application security, such as CSPM, CSSM, CISSP, CISM, CSSLP, CCSP, CompTIA, ISC2, GIAC, or EC‑Council
• A cloud security certification: AWS Certified Security - Specialty (SCS-C02) or equivalent
• Google Professional Cloud Security Engineer

Preferred Certifications

• AI or ML certification (AWS, GCP, or equivalent)
• AWS certifications such as Solutions Architect or DevOps Engineer