Prepare for and practice interview questions from Silac Insurance Company.

Silac Insurance Company Interview Questions

Silac Insurance Company Interview Guides

Let’s say that your company is running a standard control and variant AB test on a feature to increase conversion rates on the landing page. The PM checks the results and finds a .04 p-value.

How would you assess the validity of the result?

Experiment Validity

In an A/B test, how can you check if assignment to the various buckets was truly random?

In an A/B test, which of the following is a common method to determine if the assignment to the test groups was truly random?

In an A/B test, which of the following is a common method to determine if the assignment to the test groups was truly random?

Random Bucketing

You are testing hundreds of hypotheses with many t-tests. What considerations should be made?

What is a key disadvantage of the F-test when compared to multiple t-tests?

What is a key disadvantage of the F-test when compared to multiple t-tests?

Hundreds of Hypotheses

You are testing hundreds of hypotheses with many t-tests. What considerations should be made?

Silac Insurance Company Salaries by Position

About SILACSILAC Insurance Company is one of the fastest-growing insurance companies in the nation and continues to be a top contender in the industry. SILAC offers industry-leading annuity products that help individuals prepare for retirement. Teams can align around a shared vision of providing clean, simple & competitive products for clients, delivering best-in-class service to agents & business partners, and propelling the success of our employees.With a fast-growing team of more than 300 employees, we are committed to remaining adaptable, innovative, and trustworthy for our clients, agents, and employees.We hold true to our core values:<ul><li>Adaptability & Continuous Improvement</li><li>Transparency & Trust, Honesty & Integrity</li><li>Teamwork & Collaboration</li><li>Gratitude & Compassion</li></ul>At SILAC Insurance Company, we welcome and encourage diversity and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. Security Engineering ManagerJob Overview: This is a dual-role where SILAC Insurance Company is seeking an individual who will be the Application Security Manager for approximately 50% of the time and the DevSecOps Manager for the other 50% of the time. In all SILAC Technology & Security management and leadership roles, the individual hired is expected to be a working manager.In this unique role, the leader will operate as part of a team responsible for protecting the confidentiality, integrity, and availability of company assets. This role is a functional manager leading a team focused on software development lifecycle security practices, acting as a champion of secure coding and delivery practices. The Security Engineering maintains awareness of the threat landscape along with a detailed understanding of modern application development security techniques, skillfully applying knowledge and influence to achieve application security outcomes. This role works closely with Information Technology, Solutions Engineering, and other stakeholders to understand company needs and risks. As the Security Engineering Manager, the individual will oversee the day-to-day management and leadership of an engineering team responsible for the security, capability, and operations of SILAC's Continuous Integration/Continuous Delivery (CI/CD) systems and processes. The DevSecOps team is focused on securely delivering application deployment capabilities and maintaining runtime operations. This team is responsible for transitioning internally developed code into running applications. The Security Engineering Manager drives team security activities and deployment practices, as well as possessing IT operations skill sets to ensure the best user experience possible for our mission critical services.JOB DETAILSApplication Security - Lead a team of Information Security Application Engineers tasked with advancing SILAC's Secure SDLC program. Build and foster the team's abilities to collaborate and achieve security outcomes. Manage the team's project and operational activities in coordination with the Solutions Engineering team. Advocate and advance goals of the application security program. Lead application security reviews, deliver reports that enable understanding and remediation of security concerns. Collaborate with the Project Management Office.Secure Software Development Lifecycle (SSDLC) - Collaborate with Software Engineering and other technical teams to understand custom applications, development processes, and support systems in order to build secure by design services. Assess and prioritize SSDLC framework activities, assist in advancing engineer security awareness, perform secure code reviews, and build security into delivery and maintenance processes. Work closely with architecture team to define security requirements for systems.Security Operations - Collaborate with the leader of the Attack Surface Management and Security Operations Team to maintain organizational threat & vulnerability management awareness, systems, processes, and procedures. Understand the evolving threat landscape, assess company asset exposure, and carry out daily activities that support security goals. Collaborate with IT teams to complete remediation efforts. Participate in incident response activities. Work with appropriate teams to prioritize remediation of vulnerabilities.Documentation - Review, assess, and update security documentation, including policies, standards, baselines, and procedures. Maintain and update reporting processes that communicate key security KPI's to stakeholders. Create and track metrics that reflect SSDLC activity performance. Coordinate with Governance, Risk and Compliance team to ensure appropriate documentation and tracking of policies and procedures. Ensure compliance with regulatory standards, especially as they relate to sensitive and confidential information.DevSecOps - Manage the team's project and operational activities in coordination with the Solutions Engineering, Information Security, and IT Operations teams. Build and foster the team's abilities to collaborate and achieve security outcomes. Mentor and provide guidance to team members to promote staff development and align with the organization's goals. Manage staff scheduling to fulfill work requirements and objectives. Conduct performance evaluations and reviews. Lead and account for activities that maintain uptime, install updates, and remediate vulnerabilities for all application support systems:<ul><li>Develop and implement monitoring and logging solutions to ensure visibility and proactive detection of security and service incidents;</li><li>Participate in incident response activities, perform root cause analysis, and recommend remediation strategies; and</li><li>Strive toward a culture of continuous improvement by advancing personal and team skills and capabilities.</li></ul> CI/CD Engineering & Administration - Design, implement, and maintain CI/CD pipeline systems, including production and lower environments. Emphasize and leverage automation capabilities to secure, build, test, deploy, and operate mission critical applications. Collaborate with Software Engineering, Information Security, and IT Operations teams to understand and align organizational goals and integrate this information into the software delivery lifecycle:<ul><li>Ensure all environments are standardized and automated processes are established;</li><li>Promote better workflows to enhance a better work experience;</li><li>Responsible for standardizing environments for ease of deployments; and</li><li>Align and participate in organizational change control processes.</li></ul> As a working leader, you are expected to mentor and provide guidance as well as hands on learning for team members. In this role, and as a member of the Security & Technology team, you are expected to be available to work evenings and weekends as needed, and you will be on-call in the PagerDuty schedule. JOB REQUIREMENTSREQUIRED<ul><li>Five years of software development, engineering, or architecture work experience and/or five years of application pipeline engineering and runtime operations experience.</li><li>Five years of security focused, professional work experience</li><li>At least three years managing a technical team of engineers, including organizing work, evaluating performance, conducting reviews, and fostering employee development</li><li>Deep understanding of web application architecture design, software development, and related security concepts and concerns, including secure coding patterns, OWASP, data flows, authentication, access control, and data protection</li><li>Experience designing and implementing automation into CI/CD application delivery pipeline and runtime architecture and infrastructure, ideally using TeamCity</li><li>Experience with threat modeling methodologies and appropriate tooling</li><li>Experience integrating technical controls</li><li>Ability to integrate security principles and techniques, such as IAM, defense in depth, least privileged access, and vulnerability management into development and delivery processes</li><li>Proficiency in several coding languages, ideally C#, Python, PHP. SSRS, React, Angular</li><li>Ability to quickly learn and apply security concepts to new languages</li><li>Experience implementing, and supporting, the following technologies:<ul><li>Container Orchestration (K8S, Docker Swarm)</li><li>CI/CD, version control, testing frameworks.</li><li>Monitoring (Application Performance and services uptime)</li><li>Experience with relational database design and SQL query language</li></ul></li><li>Experience with the following technologies:<ul><li>Micro Services</li><li>Load Balancers</li><li>Hypervisors</li><li>Linux administration</li><li>Networking</li><li>Scripting proficiency</li><li>Detailed-oriented, solid organizational skills and the ability to prioritize tasks and meet deadlines</li><li>Experience in sprint planning process with integrated teams and multiple priorities</li><li>Ability to prosper in a fast paced, constantly changing environment</li><li>High level of integrity, trustworthiness, and ethics</li></ul></li><li>Exceptional communication and collaboration skills</li><li>Ability to shape and support secure practices that are accomplished by others</li></ul>DESIRED<ul><li>Experience implementing governance models, such as NIST CSF or ISO 27001</li><li>Experience with Agile project management techniques</li><li>Financial industry experience</li><li>Experience with regulated environments such as PCI, HIPAA, GLBA, SOX, FFIEC</li><li>Bachelor's degree in related field (Business IS, Software Engineering, etc.)</li><li>Management of tasks and workflows utilizing Agile and Scrum structure</li><li>Experience designing technical security controls, such as IAAA, network access control, network layer and web application firewalls, IDS/IPS, API security, software security testing.</li><li>Familiarity with Mirantis Kubernetes Engine, Docker Swarm, Sentry, and TeamCity</li><li>Experience implementing ELK stack</li><li>Experience with cloud deployment solutions</li><li>Strong understanding of container security and hardening container images</li><li>Understanding of database obfuscation practices.</li></ul>A DAY IN THE LIFE OF Security Engineering ManagerLead the application security effort and team o Guide team members' daily project and operational activitiesInteract with the Engineering team to advocate secure SDLC activities o Manage and mature the application security program through direct interactionsWork with architects, security specialists and engineers to review and design security requirementsInteract with sprint teams on security related issues, such as secure code reviews, threat modeling, coding patterns, and security awarenessDetermine and report on SSDLC metricsParticipate in security operations activities, with an emphasis on source code and runtimes o Review patch and vulnerability notifications as issuedCollaboration with Security Operations and Attack Surface Management for vulnerability discovery, validation, and remediation trackingCollaborate with IT teams to design remediations and shepherd through to completionContribute to design, planning, and implementation of security related projectsWrite, review, and update security documentation, respond to audit requestsInteracting with Product Owners, Development teams, and InfoSec teams to set priorities, improve processes, and continually improve security, risk management, and uptime. This is mainly accomplished through attending standup's, sprint reviews, and leadership meetingsContinually work with related teams to resolve bugs, patch software, and expand infrastructure to provide the best customer experience possible.Coordinate tasks and schedules of the DevSecOps team to ensure daily system operation and functionality for supporting business process flows.Mentor and work with each team member assign goals and promote growth within the organization.Collaborate with management on priority tasks, use of KanBan boardBENEFITS:<ul><li>Medical Plans, including FSA and HSA</li><li>Dental and Vision</li><li>401(k) (Roth and Traditional)</li><li>Pet Insurance</li><li>Parental Leave</li><li>Paid Time and Sick Time off</li><li>10 Paid Holidays and 1 Birthday Pay</li><li>Paid Volunteer Time</li><li>College Tuition Reimbursement</li></ul>Communication during the recruitment process regarding interview requests or job offers will come directly from a recruiting team member with a silacins.com email address.At SILAC, we celebrate a diverse and inclusive work environment, where we honor and support varying backgrounds, beliefs, and perspectives for the benefit of our business, including our employees and products. We are proud to be an equal-opportunity workplace and strive to be a place where every employee feels they belong. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or a special need that requires accommodation, please let us know.
#J-18808-Ljbffr

About SILAC SILAC Insurance Company is one of the fastest-growing insurance companies in the nation and continues to be a top contender in the industry. SILAC offers industry-leading annuity products that help individuals prepare for retirement. Teams can align around a shared vision of providing clean, simple & competitive products for clients, delivering best-in-class service to agents & business partners, and propelling the success of our employees. With a fast-growing team of more than 300 employees, we are committed to remaining adaptable, innovative, and trustworthy for our clients, agents, and employees. We hold true to our core values: <ul><li>Adaptability & Continuous Improvement</li><li>Transparency & Trust, Honesty & Integrity</li><li>Teamwork & Collaboration</li><li>Gratitude & Compassion</li></ul> At SILAC Insurance Company, we welcome and encourage diversity and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. Security Engineering Manager Job Overview: This is a dual-role where SILAC Insurance Company is seeking an individual who will be the Application Security Manager for approximately 50% of the time and the DevSecOps Manager for the other 50% of the time. In all SILAC Technology & Security management and leadership roles, the individual hired is expected to be a working manager. In this unique role, the leader will operate as part of a team responsible for protecting the confidentiality, integrity, and availability of company assets. This role is a functional manager leading a team focused on software development lifecycle security practices, acting as a champion of secure coding and delivery practices. The Security Engineering maintains awareness of the threat landscape along with a detailed understanding of modern application development security techniques, skillfully applying knowledge and influence to achieve application security outcomes. This role works closely with Information Technology, Solutions Engineering, and other stakeholders to understand company needs and risks. As the Security Engineering Manager, the individual will oversee the day-to-day management and leadership of an engineering team responsible for the security, capability, and operations of SILAC's Continuous Integration/Continuous Delivery (CI/CD) systems and processes. The DevSecOps team is focused on securely delivering application deployment capabilities and maintaining runtime operations. This team is responsible for transitioning internally developed code into running applications. The Security Engineering Manager drives team security activities and deployment practices, as well as possessing IT operations skill sets to ensure the best user experience possible for our mission critical services. JOB DETAILS Application Security - Lead a team of Information Security Application Engineers tasked with advancing SILAC's Secure SDLC program. Build and foster the team's abilities to collaborate and achieve security outcomes. Manage the team's project and operational activities in coordination with the Solutions Engineering team. Advocate and advance goals of the application security program. Lead application security reviews, deliver reports that enable understanding and remediation of security concerns. Collaborate with the Project Management Office. Secure Software Development Lifecycle (SSDLC) - Collaborate with Software Engineering and other technical teams to understand custom applications, development processes, and support systems in order to build secure by design services. Assess and prioritize SSDLC framework activities, assist in advancing engineer security awareness, perform secure code reviews, and build security into delivery and maintenance processes. Work closely with architecture team to define security requirements for systems. Security Operations - Collaborate with the leader of the Attack Surface Management and Security Operations Team to maintain organizational threat & vulnerability management awareness, systems, processes, and procedures. Understand the evolving threat landscape, assess company asset exposure, and carry out daily activities that support security goals. Collaborate with IT teams to complete remediation efforts. Participate in incident response activities. Work with appropriate teams to prioritize remediation of vulnerabilities. Documentation - Review, assess, and update security documentation, including policies, standards, baselines, and procedures. Maintain and update reporting processes that communicate key security KPI's to stakeholders. Create and track metrics that reflect SSDLC activity performance. Coordinate with Governance, Risk and Compliance team to ensure appropriate documentation and tracking of policies and procedures. Ensure compliance with regulatory standards, especially as they relate to sensitive and confidential information. DevSecOps - Manage the team's project and operational activities in coordination with the Solutions Engineering, Information Security, and IT Operations teams. Build and foster the team's abilities to collaborate and achieve security outcomes. Mentor and provide guidance to team members to promote staff development and align with the organization's goals. Manage staff scheduling to fulfill work requirements and objectives. Conduct performance evaluations and reviews. Lead and account for activities that maintain uptime, install updates, and remediate vulnerabilities for all application support systems: <ul><li>Develop and implement monitoring and logging solutions to ensure visibility and proactive detection of security and service incidents;</li><li>Participate in incident response activities, perform root cause analysis, and recommend remediation strategies; and</li><li>Strive toward a culture of continuous improvement by advancing personal and team skills and capabilities.</li></ul> CI/CD Engineering & Administration - Design, implement, and maintain CI/CD pipeline systems, including production and lower environments. Emphasize and leverage automation capabilities to secure, build, test, deploy, and operate mission critical applications. Collaborate with Software Engineering, Information Security, and IT Operations teams to understand and align organizational goals and integrate this information into the software delivery lifecycle: <ul><li>Ensure all environments are standardized and automated processes are established;</li><li>Promote better workflows to enhance a better work experience;</li><li>Responsible for standardizing environments for ease of deployments; and</li><li>Align and participate in organizational change control processes.</li></ul> As a working leader, you are expected to mentor and provide guidance as well as hands on learning for team members. In this role, and as a member of the Security & Technology team, you are expected to be available to work evenings and weekends as needed, and you will be on-call in the PagerDuty schedule. JOB REQUIREMENTS REQUIRED <ul><li>Five years of software development, engineering, or architecture work experience and/or five years of application pipeline engineering and runtime operations experience.</li><li>Five years of security focused, professional work experience</li><li>At least three years managing a technical team of engineers, including organizing work, evaluating performance, conducting reviews, and fostering employee development</li><li>Deep understanding of web application architecture design, software development, and related security concepts and concerns, including secure coding patterns, OWASP, data flows, authentication, access control, and data protection</li><li>Experience designing and implementing automation into CI/CD application delivery pipeline and runtime architecture and infrastructure, ideally using TeamCity</li><li>Experience with threat modeling methodologies and appropriate tooling</li><li>Experience integrating technical controls</li><li>Ability to integrate security principles and techniques, such as IAM, defense in depth, least privileged access, and vulnerability management into development and delivery processes</li><li>Proficiency in several coding languages, ideally C#, Python, PHP. SSRS, React, Angular</li><li>Ability to quickly learn and apply security concepts to new languages</li><li>Experience implementing, and supporting, the following technologies:<ul><li>Container Orchestration (K8S, Docker Swarm)</li><li>CI/CD, version control, testing frameworks.</li><li>Monitoring (Application Performance and services uptime)</li><li>Experience with relational database design and SQL query language</li></ul></li><li>Experience with the following technologies:<ul><li>Micro Services</li><li>Load Balancers</li><li>Hypervisors</li><li>Linux administration</li><li>Networking</li><li>Scripting proficiency</li><li>Detailed-oriented, solid organizational skills and the ability to prioritize tasks and meet deadlines</li><li>Experience in sprint planning process with integrated teams and multiple priorities</li><li>Ability to prosper in a fast paced, constantly changing environment</li><li>High level of integrity, trustworthiness, and ethics</li></ul></li><li>Exceptional communication and collaboration skills</li><li>Ability to shape and support secure practices that are accomplished by others</li></ul> DESIRED <ul><li>Experience implementing governance models, such as NIST CSF or ISO 27001</li><li>Experience with Agile project management techniques</li><li>Financial industry experience</li><li>Experience with regulated environments such as PCI, HIPAA, GLBA, SOX, FFIEC</li><li>Bachelor's degree in related field (Business IS, Software Engineering, etc.)</li><li>Management of tasks and workflows utilizing Agile and Scrum structure</li><li>Experience designing technical security controls, such as IAAA, network access control, network layer and web application firewalls, IDS/IPS, API security, software security testing.</li><li>Familiarity with Mirantis Kubernetes Engine, Docker Swarm, Sentry, and TeamCity</li><li>Experience implementing ELK stack</li><li>Experience with cloud deployment solutions</li><li>Strong understanding of container security and hardening container images</li><li>Understanding of database obfuscation practices.</li></ul> A DAY IN THE LIFE OF Security Engineering Manager Lead the application security effort and team o Guide team members' daily project and operational activities Interact with the Engineering team to advocate secure SDLC activities o Manage and mature the application security program through direct interactions Work with architects, security specialists and engineers to review and design security requirements Interact with sprint teams on security related issues, such as secure code reviews, threat modeling, coding patterns, and security awareness Determine and report on SSDLC metrics Participate in security operations activities, with an emphasis on source code and runtimes o Review patch and vulnerability notifications as issued Collaboration with Security Operations and Attack Surface Management for vulnerability discovery, validation, and remediation tracking Collaborate with IT teams to design remediations and shepherd through to completion Contribute to design, planning, and implementation of security related projects Write, review, and update security documentation, respond to audit requests Interacting with Product Owners, Development teams, and InfoSec teams to set priorities, improve processes, and continually improve security, risk management, and uptime. This is mainly accomplished through attending standup's, sprint reviews, and leadership meetings Continually work with related teams to resolve bugs, patch software, and expand infrastructure to provide the best customer experience possible. Coordinate tasks and schedules of the DevSecOps team to ensure daily system operation and functionality for supporting business process flows. Mentor and work with each team member assign goals and promote growth within the organization. Collaborate with management on priority tasks, use of KanBan board BENEFITS: <ul><li>Medical Plans, including FSA and HSA</li><li>Dental and Vision</li><li>401(k) (Roth and Traditional)</li><li>Pet Insurance</li><li>Parental Leave</li><li>Paid Time and Sick Time off</li><li>10 Paid Holidays and 1 Birthday Pay</li><li>Paid Volunteer Time</li><li>College Tuition Reimbursement</li></ul> Communication during the recruitment process regarding interview requests or job offers will come directly from a recruiting team member with a silacins.com email address. At SILAC, we celebrate a diverse and inclusive work environment, where we honor and support varying backgrounds, beliefs, and perspectives for the benefit of our business, including our employees and products. We are proud to be an equal-opportunity workplace and strive to be a place where every employee feels they belong. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or a special need that requires accommodation, please let us know.

About SILAC SILAC Insurance Company is one of the fastest-growing insurance companies in the nation and continues to be a top contender in the industry. SILAC offers industry-leading annuity products that help individuals prepare for retirement. Teams can align around a shared vision of providing clean, simple & competitive products for clients, delivering best-in-class service to agents & business partners, and propelling the success of our employees. With a fast-growing team of more than 300 employees, we are committed to remaining adaptable, innovative, and trustworthy for our clients, agents, and employees. We hold true to our core values: <ul><li>Adaptability & Continuous Improvement</li><li>Transparency & Trust, Honesty & Integrity</li><li>Teamwork & Collaboration</li><li>Gratitude & Compassion</li></ul> At SILAC Insurance Company, we welcome and encourage diversity and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. DevSecOps Software Engineer Department Overview: The DevSecOps team is responsible for the continuous integration and continuous delivery of our custom applications. The team integrates security measures into the software development lifecycle, as well as focuses on improving the reliability, performance, and availability of our custom software applications. The team monitors critical websites and backend services to maintain uptime and availability of company resources. The team monitors, troubleshoots and optimizes key infrastructure related to the CICD pipeline and consumer services. Job Overview: The DevSecOps Software Engineer IV is a senior position on our DevSecOps team that designs, implements, and maintains our secure development lifecycle environments. As a critical part of our DevSecOps team, you will protect customer data, while improving our end user experience. The DevSecOps Software Engineer will report to the DevSecOps Manager and will work closely with various departments to be instrumental in secure application deployment, monitoring, alerting, and support of our development and production environments. The ideal candidate will have a 'security first' mindset, that prioritizes our customer data security over operational activities. DevSecOps experience, along with a Software Engineering background, will add their skills to contribute to the overall success of the team. Job Details What you'd do: CI/CD Engineering and Administration <ul><li>Design, implement, and maintain CI/CD pipeline systems, including production and lower environments. Emphasize and leverage automation capabilities to secure, build, test, deploy, and operate mission critical applications.</li><li>Improve the standardization of all environments to enable consistency in system behavior between environments.</li><li>Promote better workflows to enhance a better work experience.</li><li>Responsible for standardizing environments for ease of deployments.</li></ul> SRE Responsibilities <ul><li>Monitor, maintain and deploy new environments to support the reliability and security of our core business platforms.</li><li>Maintain our various testing and production environments to facilitate security, testing, and uptime.</li><li>Responsible for bug and security patching of core applications</li></ul> Simplify and Optimize Workflows <ul><li>Assume DevSecOps tasks as needed by working with IT staff to define hardware requirements, designing optimal deployment strategies, and getting software deployed into target environments.</li><li>Efficiency is your strength, and you find ways to improve any system or process you interact with.</li></ul> Job Requirements Who you are: You are a motivated person who can drive the adoption of best practices and appropriate technologies, in an environment that is constantly evolving. You can manage your projects while supporting the initiatives of other teams that are dependent on DevSecOps, giving appropriate pushback when there are conflicting priorities. You have the ability to identify the activities that will bring the most value to the organization and know when to begin a new initiative and when bring in other parties. Required <ul><li>Bachelor's degree in related field (Business IS, Software Engineering, etc.), or equivalent experience</li><li>4 years professional experience in Software Development</li><li>5 years professional experience with DevOps related responsibilities</li><li>Experience with Bash, PowerShell, and WSL</li><li>Experience in configuring traffic flows through a Load Balancer</li><li>Experience with certificate management</li><li>Experience in configuring and maintaining message brokers and caching solutions</li><li>Expert in Agile development methodologies and practices</li><li>Expert with CI/CD concepts and automation tools</li><li>Experience with container orchestration tools, such as Docker Swarm and Kubernetes</li><li>Experience with private Docker registries</li><li>Excellent troubleshooting skills</li><li>Expert with software version and change control technologies, such as GIT.</li><li>Experience in containerized microservices and service-oriented architectures</li><li>Ability to work in a fast-paced environment, prioritize tasks, and meet deadlines</li><li>Ability to successfully operate as part of a cross functional, collaborative team</li><li>Experience with MS Office applications such as Word, MS Excel, and Outlook</li><li>Ability to communicate professionally both verbally and in writing</li><li>Experience with Nuget Feeds</li></ul> Desired <ul><li>Experience with any of the following: TeamCity, Prometheus / Grafana Stack, ELK (Elasticsearch Clustering, Logstash, Kibana) Stack, Apache and Nginx, jq and yq (command line processing tools)</li><li>Experience in configuring and troubleshooting RabbitMQ</li><li>Experience in configuring and troubleshooting Redis Sentinel</li><li>Experience with JavaScript, Python, and C#, MSQL</li><li>Experience with RHEL virtual machines, ssh, troubleshooting, basic system administration, monitoring, and patching.</li><li>Experience with any Cloud platform and Cloud deployment solutions, Azure preferably.</li></ul> BENEFITS: <ul><li>Medical Plans (SelectHealth), including FSA and HSA</li><li>Dental and Vision (MetLife)</li><li>401(k) (Roth and Traditional)</li><li>Pet Insurance (Nationwide)</li><li>Parental Leave</li><li>Paid Time and Sick Time off</li><li>10 Paid Holidays and 1 Birthday Pay</li><li>Paid Volunteer Time</li><li>College Tuition Reimbursement</li></ul> Communication during the recruitment process regarding interview requests or job offers will come directly from a recruiting team member with a silacins.com email address. At SILAC, we celebrate a diverse and inclusive work environment, where we honor and support varying backgrounds, beliefs, and perspectives for the benefit of our business, including our employees and products. We are proud to be an equal-opportunity workplace and strive to be a place where every employee feels they belong. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or a special need that requires accommodation, please let us know.

<h3>Job Description</h3><div>Job Description<div>About SILACSILAC Insurance Company is one of the fastest-growing insurance companies in the nation and continues to be a top contender in the industry. SILAC offers industry-leading annuity products that help individuals prepare for retirement. Teams can align around a shared vision of providing clean, simple & competitive products for clients, delivering best-in-class service to agents & business partners, and propelling the success of our employees.With a fast-growing team of more than 300 employees, we are committed to remaining adaptable, innovative, and trustworthy for our clients, agents, and employees.We hold true to our core values:<ul><li>Adaptability & Continuous Improvement</li><li>Transparency & Trust, Honesty & Integrity</li><li>Teamwork & Collaboration</li><li>Gratitude & Compassion</li></ul>At SILAC Insurance Company, we welcome and encourage diversity and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. Security Engineering ManagerJob Overview: This is a dual-role where SILAC Insurance Company is seeking an individual who will be the Application Security Manager for approximately 50% of the time and the DevSecOps Manager for the other 50% of the time. In all SILAC Technology & Security management and leadership roles, the individual hired is expected to be a working manager.In this unique role, the leader will operate as part of a team responsible for protecting the confidentiality, integrity, and availability of company assets. This role is a functional manager leading a team focused on software development lifecycle security practices, acting as a champion of secure coding and delivery practices. The Security Engineering maintains awareness of the threat landscape along with a detailed understanding of modern application development security techniques, skillfully applying knowledge and influence to achieve application security outcomes. This role works closely with Information Technology, Solutions Engineering, and other stakeholders to understand company needs and risks. As the Security Engineering Manager, the individual will oversee the day-to-day management and leadership of an engineering team responsible for the security, capability, and operations of SILAC's Continuous Integration/Continuous Delivery (CI/CD) systems and processes. The DevSecOps team is focused on securely delivering application deployment capabilities and maintaining runtime operations. This team is responsible for transitioning internally developed code into running applications. The Security Engineering Manager drives team security activities and deployment practices, as well as possessing IT operations skill sets to ensure the best user experience possible for our mission critical services.JOB DETAILSApplication Security - Lead a team of Information Security Application Engineers tasked with advancing SILAC's Secure SDLC program. Build and foster the team's abilities to collaborate and achieve security outcomes. Manage the team's project and operational activities in coordination with the Solutions Engineering team. Advocate and advance goals of the application security program. Lead application security reviews, deliver reports that enable understanding and remediation of security concerns. Collaborate with the Project Management Office.Secure Software Development Lifecycle (SSDLC) - Collaborate with Software Engineering and other technical teams to understand custom applications, development processes, and support systems in order to build secure by design services. Assess and prioritize SSDLC framework activities, assist in advancing engineer security awareness, perform secure code reviews, and build security into delivery and maintenance processes. Work closely with architecture team to define security requirements for systems.Security Operations - Collaborate with the leader of the Attack Surface Management and Security Operations Team to maintain organizational threat & vulnerability management awareness, systems, processes, and procedures. Understand the evolving threat landscape, assess company asset exposure, and carry out daily activities that support security goals. Collaborate with IT teams to complete remediation efforts. Participate in incident response activities. Work with appropriate teams to prioritize remediation of vulnerabilities.Documentation - Review, assess, and update security documentation, including policies, standards, baselines, and procedures. Maintain and update reporting processes that communicate key security KPI's to stakeholders. Create and track metrics that reflect SSDLC activity performance. Coordinate with Governance, Risk and Compliance team to ensure appropriate documentation and tracking of policies and procedures. Ensure compliance with regulatory standards, especially as they relate to sensitive and confidential information.DevSecOps - Manage the team's project and operational activities in coordination with the Solutions Engineering, Information Security, and IT Operations teams. Build and foster the team's abilities to collaborate and achieve security outcomes. Mentor and provide guidance to team members to promote staff development and align with the organization's goals. Manage staff scheduling to fulfill work requirements and objectives. Conduct performance evaluations and reviews. Lead and account for activities that maintain uptime, install updates, and remediate vulnerabilities for all application support systems:<ul><li>Develop and implement monitoring and logging solutions to ensure visibility and proactive detection of security and service incidents;</li><li>Participate in incident response activities, perform root cause analysis, and recommend remediation strategies; and</li><li>Strive toward a culture of continuous improvement by advancing personal and team skills and capabilities.</li></ul> CI/CD Engineering & Administration - Design, implement, and maintain CI/CD pipeline systems, including production and lower environments. Emphasize and leverage automation capabilities to secure, build, test, deploy, and operate mission critical applications. Collaborate with Software Engineering, Information Security, and IT Operations teams to understand and align organizational goals and integrate this information into the software delivery lifecycle:<ul><li>Ensure all environments are standardized and automated processes are established;</li><li>Promote better workflows to enhance a better work experience;</li><li>Responsible for standardizing environments for ease of deployments; and</li><li>Align and participate in organizational change control processes.</li></ul> As a working leader, you are expected to mentor and provide guidance as well as hands on learning for team members. In this role, and as a member of the Security & Technology team, you are expected to be available to work evenings and weekends as needed, and you will be on-call in the PagerDuty schedule. JOB REQUIREMENTSREQUIRED <ul><li>Five years of software development, engineering, or architecture work experience and/or five years of application pipeline engineering and runtime operations experience.</li><li>Five years of security focused, professional work experience</li><li>At least three years managing a technical team of engineers, including organizing work, evaluating performance, conducting reviews, and fostering employee development</li><li>Deep understanding of web application architecture design, software development, and related security concepts and concerns, including secure coding patterns, OWASP, data flows, authentication, access control, and data protection</li><li>Experience designing and implementing automation into CI/CD application delivery pipeline and runtime architecture and infrastructure, ideally using TeamCity</li><li>Experience with threat modeling methodologies and appropriate tooling</li><li>Experience integrating technical controls</li><li>Ability to integrate security principles and techniques, such as IAM, defense in depth, least privileged access, and vulnerability management into development and delivery processes</li><li>Proficiency in several coding languages, ideally C#, Python, PHP. SSRS, React, Angular</li><li>Ability to quickly learn and apply security concepts to new languages</li><li>Experience implementing, and supporting, the following technologies:<ul><li>Container Orchestration (K8S, Docker Swarm)</li><li>CI/CD, version control, testing frameworks.</li><li>Monitoring (Application Performance and services uptime)</li><li>Experience with relational database design and SQL query language</li></ul></li><li>Experience with the following technologies:<ul><li>Micro Services</li><li>Load Balancers</li><li>Hypervisors</li><li>Linux administration</li><li>Networking</li><li>Scripting proficiency</li><li>Detailed-oriented, solid organizational skills and the ability to prioritize tasks and meet deadlines</li><li>Experience in sprint planning process with integrated teams and multiple priorities</li><li>Ability to prosper in a fast paced, constantly changing environment</li><li>High level of integrity, trustworthiness, and ethics</li></ul></li><li>Exceptional communication and collaboration skills</li><li>Ability to shape and support secure practices that are accomplished by others</li></ul>DESIRED <ul><li>Experience implementing governance models, such as NIST CSF or ISO 27001</li><li>Experience with Agile project management techniques</li><li>Financial industry experience</li><li>Experience with regulated environments such as PCI, HIPAA, GLBA, SOX, FFIEC</li><li>Bachelor's degree in related field (Business IS, Software Engineering, etc.)</li><li>Management of tasks and workflows utilizing Agile and Scrum structure</li><li>Experience designing technical security controls, such as IAAA, network access control, network layer and web application firewalls, IDS/IPS, API security, software security testing.</li><li>Familiarity with Mirantis Kubernetes Engine, Docker Swarm, Sentry, and TeamCity</li><li>Experience implementing ELK stack</li><li>Experience with cloud deployment solutions</li><li>Strong understanding of container security and hardening container images</li><li>Understanding of database obfuscation practices.</li></ul>A DAY IN THE LIFE OF Security Engineering ManagerLead the application security effort and team o Guide team members' daily project and operational activitiesInteract with the Engineering team to advocate secure SDLC activities o Manage and mature the application security program through direct interactionsWork with architects, security specialists and engineers to review and design security requirementsInteract with sprint teams on security related issues, such as secure code reviews, threat modeling, coding patterns, and security awarenessDetermine and report on SSDLC metricsParticipate in security operations activities, with an emphasis on source code and runtimes o Review patch and vulnerability notifications as issuedCollaboration with Security Operations and Attack Surface Management for vulnerability discovery, validation, and remediation trackingCollaborate with IT teams to design remediations and shepherd through to completionContribute to design, planning, and implementation of security related projectsWrite, review, and update security documentation, respond to audit requestsInteracting with Product Owners, Development teams, and InfoSec teams to set priorities, improve processes, and continually improve security, risk management, and uptime. This is mainly accomplished through attending standup's, sprint reviews, and leadership meetingsContinually work with related teams to resolve bugs, patch software, and expand infrastructure to provide the best customer experience possible.Coordinate tasks and schedules of the DevSecOps team to ensure daily system operation and functionality for supporting business process flows.Mentor and work with each team member assign goals and promote growth within the organization.Collaborate with management on priority tasks, use of KanBan boardBENEFITS:<ul><li>Medical Plans, including FSA and HSA</li><li>Dental and Vision</li><li>401(k) (Roth and Traditional)</li><li>Pet Insurance</li><li>Parental Leave</li><li>Paid Time and Sick Time off</li><li>10 Paid Holidays and 1 Birthday Pay</li><li>Paid Volunteer Time</li><li>College Tuition Reimbursement</li></ul>Communication during the recruitment process regarding interview requests or job offers will come directly from a recruiting team member with a silacins.com email address.At SILAC, we celebrate a diverse and inclusive work environment, where we honor and support varying backgrounds, beliefs, and perspectives for the benefit of our business, including our employees and products. We are proud to be an equal-opportunity workplace and strive to be a place where every employee feels they belong. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or a special need that requires accommodation, please let us know. Job Posted by ApplicantPro </div></div>

Silac Insurance Company Interview Questions

Silac Insurance Company Interview Guides

Silac Insurance Company Interview Questions

Silac Insurance Company Salaries by Position

Silac Insurance Company Opening Jobs