Application Security Architect at RGA Reinsurance Company in Minnesota

Application Security Architect Location: Remote, Minnesota, United States of America You desire impactful work. You’reRGA ready RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all. The Application Security Architect will partner with engineering teams to build secure software from design through delivery. This role is equal parts hands-on advisor and security design reviewer: you will help developers write secure code, efficiently triage and resolve false positives, andprovidepragmatic guidance that improves security outcomes without slowing delivery. You will also perform Secure by Design reviews for new applications and material changes to existing applications to ensure solutions are secure, scalable, and compliant with company standards. Principle Duties Developer enablement & secure coding support Coach and support developers in writing secure code, including secure patterns, common vulnerability classes, and secure use of frameworks and libraries. Providetimelyconsulting on “how to do it right” (architecture, implementation details, and operational considerations) and help teams choose secure-by-default approaches. Triage findings from SAST, SCA, DAST, container andIaCscanning; investigate,validate, and resolve false positives; and help teams prioritize true risk. Partnerwith teams to tune security tools, reduce noise, and improve signal quality (rules, suppressions, baselines, and exception processes) whilemaintainingstrong security posture. Secure by Design reviews Conduct Secure by Design reviews for new applications and material changes to existing applications,validatingsecurity requirements and design decisions early. Lead andfacilitatethreat modeling workshops;identifyabuse cases, trust boundaries, and attack paths; and document mitigations and residual risk. Review authentication/authorization design, data flows, secrets handling, logging/monitoring, and resiliency controls to ensure secure architectures. Provide clear, actionable recommendations and track follow-through with engineering teams. CI/CD and SDLC security Adviseonthe security of CI/CD practices: pipeline hardening, least privilege, artifact integrity, signing, provenance, and secure deployment patterns. Adviseonsecure use of third-party dependencies and supply chain controls, including SCA governance and patch/vulnerability management workflows. Collaborate with platform/tooling teams to integrate security controls into developer workflows with a focus on automation and self-service. AI/ML security guidance Providesecurity architecture guidance for AI/ML and GenAI-enabled applications, including model/data risk, prompt/agent design considerations, and safe integration patterns. Help teams implement appropriate controls for data protection, access control, monitoring, and abuse prevention in AI/ML features. Collaboration & communication Act as a trusted partnertoproduct, engineering, andleadership—translating security requirements into developer-friendly guidance. Create andmaintainsecure coding guidance, reference architectures, and reusable patterns. Support incident learnings by contributing to root cause analysis and preventative design improvements. Education Bachelor’s Degree in Arts/Sciences (BA/BS) or equivalent experience - Required Master’s degree in Arts/Sciences (MA/MS) or professional industry certification - Preferred Work Experience 8+ years related IT experience; 5+ years experience in security application tools 6+ years experience in application security reviews of new architecture; 4 + years of experience with public and hybrid cloud (AWS) environments. Required Qualifications & Skills Strong software development background with the ability to read, understand, and advise on production code and design decisions. Demonstratedexpertisein threat modeling and secure architecture review for modern web and API-based applications. Expertisesecuring CI/CD and SDLC processes (pipeline security,secretsmanagement, artifact integrity, build/release controls, and automation). Experience with application security tooling and processes, including managing findings and resolving false positives (SAST/SCA/DAST and related scanning in pipelines). Working knowledge of AI/ML security risks and mitigations for applications that use ML models or GenAI components. Strong collaborative and consulting skills: ability to influence without authority, communicate clearly, and deliver pragmatic, developer-friendly recommendations. #LI-CW1 #LI-Remote What you can expect from RGA: Gain valuable knowledge from and experience with diverse, caring colleagues around the world. Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought. Join the bright and creative minds of RGA, and experience vast, endless career potential. We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you. Compensation Range: $150,770.00 - $224,640.00 Annual Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits. RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws.