Senior IT Security Engineer

Talcott Financial Group* is an international life insurance group and the industry’s trusted partner for comprehensive risk solutions. Talcott creatively designs and expertly delivers responsive solutions that transfer risk and manage capital in a way that supports the strategic needs of insurers today and into the future. Talcott Financial Group has a proven track record of well-executed transactions, and the enterprise benefits from its strong financial position with over $127 billion in assets under management, its investment-grade financial strength ratings, and its partnership with Sixth Street, a leading global investment firm. Talcott Financial Group’s two core business platforms include: U.S. based Talcott Resolution and Bermuda and Cayman based Talcott Re. Overview: We are seeking a highly skilled and motivated cybersecurity Engineer to help advance our enterprise security strategy. This role reports directly to the Chief Information Security Officer and partners closely with senior leadership, IT teams, and business units to strengthen and mature our security posture. The ideal candidate brings deep technical expertise, strong analytical capabilities, and the ambition to grow into broader leadership responsibilities. Key Responsibilities: Analyze and interpret advanced cyber threats, providing clear, actionable insights. Stay ahead of emerging risks by maintaining a strong understanding of the evolving threat landscape. Communicate security issues and recommended remediation clearly to technical teams and executive stakeholders. Oversee critical security services, including vulnerability management, firewalls, certificate management, SOC operations, and data loss prevention. Design, engineer, and maintain secure identity platforms across Active Directory and Entra ID. Lead the architecture, governance, and automation of cloud security controls. Implement and manage PKIaaS to streamline enterprise certificate lifecycle management. Evaluate new technologies through research and proof‑of‑concept efforts, advising leadership on impactful security investments. Advise business and IT partners on building secure processes and systems. Qualifications: Bachelor’s degree in Information Security, Computer Science, Information Systems, or similar field. Minimum of 10 years of cybersecurity or relevant IT experience. Professional certifications (CISSP, GIAC, ISACA, etc.) are preferred Deep experience with Active Directory, Group Policy, and Entra ID are required Hands‑on expertise with network security technologies (firewalls, IDS/IPS, malware defense, DDoS/bot mitigation, proxies, ACLs, wireless security). Palo Alto experience is a plus. Experience with cloud security across Azure, Oracle Cloud, and O365. Strong understanding of enterprise threat analysis, mitigation strategies, and application‑layer security. Solid knowledge of networking and web protocols (TCP/IP, HTTPS, IPsec, DNS). Experience conducting network and application vulnerability assessments. Familiarity with encryption, data protection, DLP, and endpoint security. Experience designing, implementing, and operating enterprise Public Key Infrastructure (PKI). Understanding AI cybersecurity risks and mitigation strategies. Deep experience with Active Directory, Group Policy, and Entra ID. Practical understanding of container and API security concepts (image scanning, runtime protection, secrets management, gateway/WAF, auth/z, rate limiting). Proven ability to collaborate across organizational and vendor teams. Strong decision‑making skills with the ability to balance security and business needs in a dynamic environment. Excellent written and verbal communication skills. Compensation: This range represents the minimum and maximum annual base salary we reasonably expect to pay for this role at the time of posting. The actual base pay could vary and may be above or below the listed range. The base pay is based on factors including but not limited to experience, competence, and demonstration of proficiencies essential for the role. The base pay is just one component of Talcott’s total annual compensation for employees. Other compensation may include annual bonuses, long-term incentives and recognition. *This role is not eligible for visa sponsorship. Applicants must be authorized to work in the United States on a full-time basis without current or future visa sponsorship. **Talcott Financial Group is an equal employment employer. All qualified applicants will receive consideration without regard to race, color, sex, religion, age, national origin, disability, veteran status, sexual orientation, gender identity or expression, marital status, ancestry or citizenship status, genetic information, pregnancy status or any other characteristic protected by law. Talcott Resolution maintains a drug-free workplace. For more information regarding our Privacy Policy, please go to