Senior Information Security Engineer

AAA Life Insurance Company•Livonia, MI

1d•Hybrid

About The Position

AAA Life is a respected and trusted American brand that has been focusing on Life Insurance and Annuity Products since 1969. At AAA Life we have over 1.8 million policies where we take pride in earning the trust of our policyholders who understand our promise to be there for them – and their families – when we’re needed most. By joining the AAA Life team, you are joining a company that genuinely cares about helping each other, with a devotion to protect the lives of those around us. We embrace a diverse, equitable, inclusive culture where all associates can feel a sense of belonging and use their unique talents and perspective to influence, innovate, motivate, and thrive. We are looking for a Senior Information Security Engineer who cares deeply about protecting people, not just data. At AAA Life Insurance, our members trust us with their futures, and in this role, you will be the guardian of that trust. You won’t just be monitoring alerts; you will partner with our Architecture team to build scalable guardrails that allow our business to move fast securely. You will act as a force multiplier for the team, bringing expertise in cloud security and vulnerability management to modernize how we detect, defend, and respond to threats.

Requirements

Experience: 7+ years in Information Technology, with at least 5 years dedicated to Information Security Engineering.
Cloud Proficiency: Deep hands-on experience with AWS security services and modern CSPM tools (Wiz experience is a major plus).
Technical Chops: Strong working knowledge of Vulnerability Management platforms, Endpoint Detection & Response (EDR) tools, and DLP engineering.
Education: Bachelor’s degree in a computer-related field or equivalent practical experience.

Nice To Haves

Certifications: We value ability over paper, but certifications like CISSP, CCSP, AWS Security Specialty, or GIAC are strong indicators of your expertise.

Responsibilities

Cloud & Infrastructure Security (AWS & Wiz)
Collaborative Design: Work closely with the Architecture team to implement automated security guardrails in AWS, ensuring "secure by design" deployments that scale.
CSPM Ownership: Serve as the primary engineer for our Cloud Security Posture Management (CSPM) platform (Wiz). You will operationalize findings, prioritize risks, and work with DevOps teams to remediate issues without breaking builds.
IAM Engineering: Engineer and maintain Identity and Access Management (IAM) roles and policies, moving us toward a true Least Privilege model.
Threat & Vulnerability Management
Lifecycle Management: Own the Vulnerability Management lifecycle. You will move us beyond simple scanning to intelligent prioritization, ensuring we patch what matters most, when it matters.
Endpoint Resilience: Manage and tune our Endpoint Security solutions. You will ensure our detection logic is sharp and false positives are low, keeping our endpoints resilient against modern malware and ransomware.
Data Protection & Engineering
DLP Strategy: Lead the engineering of Data Loss Prevention (DLP) controls. You will help us identify sensitive data flows and build policies that stop exfiltration while allowing legitimate business to continue.
App Security (Optional): Partner with development teams to introduce Product/App Security best practices, helping them catch security flaws early in the software development lifecycle.