Be an Early Applicant
Start-Up Vibes with The Stability of a Fortune 100 Company.
The Role
Engineer automated application and cloud security solutions, support SAST, DAST, SCA, CSPM, and vulnerability-scanning tools across the software development lifecycle. Advise engineering teams on secure architecture, monitor emerging threats, remediate assessment findings, improve security processes, and mentor staff. The role requires collaboration across cross-functional teams and expertise in DevSecOps, cloud technologies, CI/CD pipelines, security testing, and vulnerability management.
Summary Generated by Built In
About the Job:
Northwestern Mutual is looking for enthusiastic technologists who want to grow their career in DevSecOps - Application & Cloud Security. You're the right fit if you love to solve problems and are always striving to learn new things. We're looking for self-motivated and self-driven engineers who are passionate about what they do and love cybersecurity. Your knowledge in application security, DevSecOps practices, and cloud technologies will be instrumental in further maturing our application and cloud security posture throughout the Enterprise. In this position, you will work with cross-functional teams across a set of diverse technologies to manage application and cloud security tools with an automation-first mindset. You will work in an agile and innovative environment, solving complex problems and collaborating with architects and engineers to ensure the safety and security of Northwestern Mutual's applications.
What You'll Bring to the Role:
What you'll get to do:
Further impress us with:
Skills You Have:
Application Security - Introduces security standards during application development and implements security procedures to protect applications in production. Utilizes knowledge to implement authentication for applications that contain sensitive data. Ensures that no PII/PCI information is logged. Conducts PenTest for external facing apps.
Adaptive Communication - Formulates strategies to be used to convey complex information about services, products, systems, or processes to targeted audiences; communicates and liaises between technical and non-technical audiences.
Cloud Security - Creates a set of policies, technologies, applications, and controls across the cloud ecosystem to protect virtualized IP, data, and the cloud computing infrastructure.
DevOps - Applies continuous integration and delivery to implement applications and services at a higher velocity.
Engineering Expertise & Practices - Applies specialized experiences in different facets of engineering, including data, applications, cyber, systems, operations, product, security, and testing, along with technical aptitude to adapt new expertise as they become relevant through an understanding of underlying engineering principles.
Threat Awareness - Utilizes knowledge of threats to support tracking of common and emerging security threats to increase awareness of potential risks and the protections against them.
Vulnerability Assessment & Management - Conducts assessments of threats and vulnerabilities to identify the technical outcome if a vulnerability is exploited and determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations.
#LI-Hybrid
Compensation Range:
Pay Range - Start:
$118,960.00
Pay Range - End:
$178,440.00
Geographic Specific Pay Structure:
Structure 110:
$130,880.00 USD - $196,320.00 USD
Structure 115:
$136,800.00 USD - $205,200.00 USD
We believe in fairness and transparency. It's why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you're living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more.
Grow your career with a best-in-class company that puts our clients' interests at the center of all we do. Get started now!
Northwestern Mutual is an equal opportunity employer that welcomes talented individuals of all backgrounds. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives.
Skills
Engineering Expertise & Practices (NM) - Advanced, Adaptive Communication (NM) - Intermediate, Application Security (NM) - Intermediate, Vulnerability Assessment & Management (NM) - Intermediate, DevOps (NM) - Advanced, Cloud Security (NM) - Intermediate, Threat Awareness (NM) - Advanced
FIND YOUR FUTURE
We're excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and our commitment to a culture of belonging.
Northwestern Mutual is looking for enthusiastic technologists who want to grow their career in DevSecOps - Application & Cloud Security. You're the right fit if you love to solve problems and are always striving to learn new things. We're looking for self-motivated and self-driven engineers who are passionate about what they do and love cybersecurity. Your knowledge in application security, DevSecOps practices, and cloud technologies will be instrumental in further maturing our application and cloud security posture throughout the Enterprise. In this position, you will work with cross-functional teams across a set of diverse technologies to manage application and cloud security tools with an automation-first mindset. You will work in an agile and innovative environment, solving complex problems and collaborating with architects and engineers to ensure the safety and security of Northwestern Mutual's applications.
What You'll Bring to the Role:
- Passionate about security
- A team player who enjoys collaborating with cross-functional teams
- A great communicator (written and verbal) with an ability to articulate complex topics in a clear and concise manner
- Employs a flexible and constructive approach when solving problems
- Proficient with development and scripting languages, Python and JavaScript preferred
- Bachelor's or equivalent experience with an emphasis in computer science, computer engineering, software engineering, MIS related field
- 4+ years' experience with cloud technologies and CICD pipelines (AWS, Gitlab CI, Kubernetes)
- 5+ years' experience in development, infrastructure, or cybersecurity
- Experience conducting security tests (static and dynamic code analysis, software composition analysis, or penetration tests)
- Experience with modern DevOps development practices
- Experience with CICD pipelines to automate application and infrastructure-as-code deployments
- Continuously looking for opportunities to improve our processes and capabilities
- Experienced working with application and engineering teams
- A self-directed individual contributor
What you'll get to do:
- Engineer solutions with a focus on automation to reduce manual and repetitive tasks
- Guide and advise application and engineering teams in the areas of Application and Cloud Security
- Operationally support Application & Cloud Security tools integrated into our software development lifecycle. Examples include SAST, DAST, SCA, CSPM, and infrastructure vulnerability scanners
- Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our company
- Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practices
- Implement remediation efforts after security assessment findings outline weaknesses requiring attention
- Mentor other staff members to ensure consistency, quality and productivity of deliverables
Further impress us with:
- Your passion for all things security
- Your ability to employ a flexible and constructive approach to solving problems
- Knowledge of application and cloud security principles
- Experience with implementing secure-by-default architecture
- Experience automating and improving manual processes
- Relevant certifications from GIAC, ISC(2) and other recognized cybersecurity industry organizations
Skills You Have:
Application Security - Introduces security standards during application development and implements security procedures to protect applications in production. Utilizes knowledge to implement authentication for applications that contain sensitive data. Ensures that no PII/PCI information is logged. Conducts PenTest for external facing apps.
Adaptive Communication - Formulates strategies to be used to convey complex information about services, products, systems, or processes to targeted audiences; communicates and liaises between technical and non-technical audiences.
Cloud Security - Creates a set of policies, technologies, applications, and controls across the cloud ecosystem to protect virtualized IP, data, and the cloud computing infrastructure.
DevOps - Applies continuous integration and delivery to implement applications and services at a higher velocity.
Engineering Expertise & Practices - Applies specialized experiences in different facets of engineering, including data, applications, cyber, systems, operations, product, security, and testing, along with technical aptitude to adapt new expertise as they become relevant through an understanding of underlying engineering principles.
Threat Awareness - Utilizes knowledge of threats to support tracking of common and emerging security threats to increase awareness of potential risks and the protections against them.
Vulnerability Assessment & Management - Conducts assessments of threats and vulnerabilities to identify the technical outcome if a vulnerability is exploited and determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations.
#LI-Hybrid
Compensation Range:
Pay Range - Start:
$118,960.00
Pay Range - End:
$178,440.00
Geographic Specific Pay Structure:
Structure 110:
$130,880.00 USD - $196,320.00 USD
Structure 115:
$136,800.00 USD - $205,200.00 USD
We believe in fairness and transparency. It's why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you're living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more.
Grow your career with a best-in-class company that puts our clients' interests at the center of all we do. Get started now!
Northwestern Mutual is an equal opportunity employer that welcomes talented individuals of all backgrounds. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives.
Skills
Engineering Expertise & Practices (NM) - Advanced, Adaptive Communication (NM) - Intermediate, Application Security (NM) - Intermediate, Vulnerability Assessment & Management (NM) - Intermediate, DevOps (NM) - Advanced, Cloud Security (NM) - Intermediate, Threat Awareness (NM) - Advanced
FIND YOUR FUTURE
We're excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and our commitment to a culture of belonging.
- Flexible work schedules
- Concierge service
- Comprehensive benefits
- Employee resource groups
Skills Required
- Bachelor’s degree or equivalent experience in computer science, computer engineering, software engineering, MIS, or a related field
- 4+ years of experience with cloud technologies and CI/CD pipelines, including AWS, GitLab CI, and Kubernetes
- 5+ years of experience in development, infrastructure, or cybersecurity
- Proficiency with development and scripting languages; Python and JavaScript preferred
- Experience conducting security tests, including static and dynamic code analysis, software composition analysis, or penetration testing
- Experience with modern DevOps development practices
- Experience automating application and infrastructure-as-code deployments through CI/CD pipelines
- Experience working with application and engineering teams
- Knowledge of application and cloud security principles
- Relevant GIAC, ISC2, or other recognized cybersecurity certifications
- Experience implementing secure-by-default architecture
What the Team is Saying
Chris
Regional Financial Consultant
Chester
Senior Cybersecurity Engineer
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
You’ll Like It Here At Northwestern Mutual, we believe that our lives and our work matter. And that doing what’s right is good for everyone. We follow through by designing tech that improves the community and cultivating creative ways to make finance accessible anywhere. These guiding principles have allowed our company to grow for more than 160 years. Here, you’ll be with a team who emphasizes integrity and prioritizes security to design experiences that better everyone. You’ll work in cross functional teams to create optimal solutions that are rooted in innovative strategy and thoughtful execution. And you’re provided development tools and opportunities to become a leader all with the support of a collaborative team. You’ll be surrounded in a culture that values innovation and works to always evolve to stay ahead of trends and client needs. We are intentional in seeking out team members who will challenge us. Our employees choose us for the career opportunities, commitment to philanthropy and desire to have a meaningful impact in the lives of our clients. You have career passions and goals. We have ambition and opportunity for you to grow your future in tech. Discover today: https://careers.northwesternmutual.com/
Why Work With Us
We invest in our people. We know careers are about choices, so we provide intentional opportunity. Here you can build creative ways to make finance accessible anywhere and revolutionize traditional processes. As a mutual company, our focus is our people — whether professional development or investments in the community.
Gallery
Northwestern Mutual Teams
Northwestern Mutual Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We offer a flexible, hybrid approach for our employees . Teams are in the office a few days a week and work from home the others.
Typical time on-site:
Flexible
