Role Description We are seeking an experienced Security Engineer to join a security project, responsible for the administration, monitoring, and continuous improvement of the organization's security infrastructure. - Administer and fine-tune Microsoft Sentinel (SIEM), including rule creation, use-case development, and incident triage - Manage and optimize Elastic Stack (Elasticsearch/ELK) for log ingestion, indexing, and security analytics - Configure, maintain, and troubleshoot enterprise firewalls (rule management, policy hardening, traffic analysis) - Operate and tune EDR (Endpoint Detection & Response) solutions for threat detection and incident response - Collaborate with SOC/IT teams to ensure compliance with banking regulatory and security standards Qualifications - Proven hands-on experience with Microsoft Sentinel (or equivalent SIEM) - Strong working knowledge of Elastic/ELK Stack administration - Solid experience configuring and managing firewalls (e.g., Palo Alto, Fortinet, Check Point) - Practical experience with EDR platforms (e.g., CrowdStrike, Defender for Endpoint, SentinelOne) - Solid Linux administration knowledge - Understanding of cloud environments and cloud security concepts (e.g., Azure, AWS, or GCP) - Regular use of AI tools to improve productivity, automate or reduce repetitive work, support decision-making, and deliver higher-quality outcomes. - Ability to use AI tools responsibly by structuring effective prompts, critically validating outputs, understanding limitations, and taking ownership of the final result. Requirements - Understanding of banking/financial sector security and compliance requirements - Relevant certifications (e.g., Security+, CySA+, SC-200, or vendor-specific) Benefits - Enjoy our holistic benefits program that covers the four pillars that we believe come together to support our wellbeing, covering social, physical, emotional wellbeing, as well as work-life fusion. - Physical Wellbeing: Our wellbeing program includes medical benefits, gym support, and personalised fitness options for an active lifestyle, complemented by team events and the Healthy Habits Club. - Work-Life Fusion: In very dynamic industries such as IT, the line between our professional and personal lives can quickly become blurred. Having a one-size-fits-one approach gives us the flexibility to define the work-life dynamic that works for us. - Emotional Wellbeing: We believe that to maintain our overall health, we need to invest in our mental wellbeing just as much as we do in our physical health, social connections or in achieving work-life balance. - Social Wellbeing: As a growing community in a hybrid environment, we want to ensure we remain connected not just by the great work we do every day but through our passions and interests.

• Fortalecer y evaluar la postura de seguridad en la nube (CSPM) • Integrar controles dentro del ciclo de desarrollo de software (DevSecOps) • Trabajar con equipos de ingeniería en revisiones de arquitectura y auditorías de cumplimiento

• Engineer **technical risk solutions** that reduce operational, cyber, and resilience risk through architecture, automation, and control design — starting on day one with minimal onboarding. • Translate **risk requirements, policies, and standards** into implementable technical patterns, guardrails, and reference architectures. • Prioritize and influence **solution design decisions** based on risk impact, blast radius, and recovery dependencies. • Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines. • Evaluate control effectiveness using **technical signals and evidence**, not just procedural compliance checklists. • Independently support the requirements of internal control, internal audit, and external audit engagements, including evidence gathering, control testing, and remediation tracking. • Deploy and manage security software, assess and apply required security patches on Security Appliances (servers). • Support the Security Appliances **24x7 on-call rotation** to enable continuous data collection. • Drive initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience. • Provide informed, immediate guidance on **risk tradeoffs and compliance requirements** to engineering and business stakeholders. • Contribute to lightweight process definition where needed, always in service of enabling better technical and audit outcomes.

Title: Associate Principal, Privileged Access Management (CyberArk) Location: United States Job Description: Job Family IT - General About Us At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment - one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there. Who We Are We believe everyone deserves to live their best life. More than a century ago, we were among the first financial services companies in America to serve everyday people from all walks of life. Today, we're part of an international holding company, with millions of customers and thousands of employees worldwide. Our insurance, retirement, and investment solutions help people make the most of what's important to them. We're empowered by a vast agent network covering North America, with diversity to match. Together with our nonprofit research institute and foundation, we tune in, step up, and are a force for good - for our customers and the communities where we live, work, and play. United in our purpose, we help people create the financial freedom to live life on their terms. What We Do Transamerica is organized into three distinct businesses. These include 1) World Financial Group, including Transamerica Financial Advisors, 2) Protection Solutions and Savings & Investments, comprised of life insurance, annuities, employee benefits, retirement plans, and Transamerica Investment Solutions, and 3) Financial Assets, which includes legacy blocks of long term care, universal life, and variable and fixed annuities. These are supported by Transamerica Corporate, which includes Finance, People and Places, General Counsel, Risk, Internal Audit, Strategy and Development, and Corporate Affairs, which covers Communications, Brand, and Government and Policy Affairs. Transamerica employs nearly 7,000 people. It's part of Aegon, an integrated, diversified, international financial services group serving approximately 23.9 million customers worldwide.* For more information, visit transamerica.com. Job Description Summary Enterprise Technology is a global organization within Transamerica. We provide dedicated application support to Transamerica, and we bring all of Aegon''s business units together through the use of technology. We provide the backbone - the infrastructure - for how everything works. We're creating the company's AI environment, building a flexible 'cloud experience' for internal hosting services, designing frameworks for data governance and management, and ensuring the security and stability of the company's technology. In short, we enable the business units to move more quickly and deliver to our clients in the best possible way. Whether customers are interested in insurance products or annuities or financial services, we''re here to ensure they don''t have to worry whether their information is safe. The people we employ are incredibly diverse, both in terms of backgrounds and skill sets. There are over 1000 of us representing a dozen or so nationalities and located in the UK, the US, the Netherlands, Hungary, Spain, and Hong Kong. Our global teams are comprised of experts in areas such as application development, information security, infrastructure services, data & analytics, risk & controls, procurement, program management, and architecture. With the breadth of functions within Enterprise Technology, individuals can pursue a wide variety of careers, and we have a focus on supporting employees' development. The most important quality in the people who join us is curiosity. A lot of what we do is problem solving, requiring colleagues to take what they know and apply it to new situations. We have many mature processes, but we're always looking for opportunities to improve, so we want people who are naturally inquisitive and confident enough to challenge the way we do things. Technology is constantly, rapidly changing - we need you to help us continue to change with it. Job Description The Privileged Access Management (PAM) organization is responsible for the management and governance of privileged access throughout Aegon. As a PAM Associate Principal, you will drive the successful delivery and implementation of the Privileged Access Management program. What You Will Do: - Design, configure, install, integrate, and maintain our PAM Solutions (CyberArk) across the enterprise environments. - Provide solutions to effectively manage human, non-human, vendor, contractor, service, application, and cloud privileged accounts. - Provide subject matter expertise to our business partners on how to manage privileged accounts while acting as an advocate for Enterprise Technology (ET) and our overall Security platform. - Work closely with PAM Engineering to identify improvements and troubleshoot incidents as they arise. - Assist with troubleshooting privileged access related issues across the enterprise environment. - Assist with shifting cultural change towards a centralized security management program - Mentor junior members of the team - Lead large initiatives in driving the PAM environment changes including presenting and influencing at the senior levels in the organization - Ensure the PAM program will have the required Characteristics to support various Regulations and Standards such as SOX, NYDFS, NIST and SOC - Create and present various material related to the PAM program at the executive-level (e.g. architectural diagrams, program roadmaps, business cases) Qualifications - Bachelor's degrees in computer science or related degree, or equivalent education/experience - 10+ years of experience managing privileged access and integrating with platforms such as LDAP, Windows/UNIX, databases, network devices, and applications. - Expert knowledge of Windows, Linux, and Mainframe systems, and how accounts and access are managed across the environments. - 3+ years of experience scripting automation tasks - Experience creating, managing, and training customers about safes, vaults, session management, key managers, credential providers, platforms, and secrets management - Behavioral & Leadership Competencies: - Commitment - Interpersonal Skills - Learning Aptitude - Critical Thinking - Resourcefulness - Tolerance of Ambiguity Preferred - Extensive experience with CyberArk On-Premise Solutions (CCP, CP, Alero, Secrets Hub, PSM, Conjur) - Certification (Sentry/Guardian) on the CyberArk platform - Knowledge of IAM, network architecture, and security concepts - Experience working in an Agile Scrum framework - Experience working in DevSecOps - Certified Information Systems Security Professional, CISSP Certified - 12+ years of experience in IT/Security Working Conditions - This is a remote or hybrid position - May require some international travel <10% - May require non-standard work hours due to global support and a globally dispersed team Compensation: The Salary for this position generally ranges between $122,000 -$162,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law. Additionally, this position is typically eligible for an Annual Bonus based on both Company and individual Performance and is at the Company's discretion. Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time. Our commitment to inclusion & diversity means that we value differences. We encourage the unique perspectives of employees and are dedicated to creating a respectful and inclusive work environment. What We Offer For eligible employees, we offer a comprehensive benefits package designed to support both the personal and financial well-being of our employees. Compensation Benefits - Competitive Pay - Bonus for Eligible Employees Benefits Package - Pension Plan - 401k Match - Employee Stock Purchase Plan - Tuition Reimbursement - Disability Insurance - Medical Insurance - Dental Insurance - Vision Insurance - Employee Discounts - Career Training & Development Opportunities Health and Work/Life Balance Benefits - Paid Time Off starting at 160 hours annually for employees in their first year of service. - Ten (10) paid holidays per year (typically mirroring the New York Stock Exchange (NYSE) holidays). - Be Well Company holistic wellness program, which includes Wellness Coaching and Reward Dollars - Parental Leave - fifteen (15) days of paid parental leave per calendar year to eligible employees with at least one year of service at the time of birth, placement of an adopted child, or placement of a foster care child. - Adoption Assistance - Employee Assistance Program - Back-Up Care Program - PTO for Volunteer Hours - Employee Matching Gifts Program - Employee Resource Groups - Inclusion and Diversity Programs - Employee Recognition Program - Referral Bonus Programs Inclusion & Diversity We believe our commitment to diversity and inclusion creates a work environment filled with exceptional individuals. We're thrilled to have been recognized for our efforts through the Human Rights Campaign Corporate Equality Index, Dave Thomas Adoption Friendly Advocate, and several Seramount lists, including the Inclusion Index, 100 Best Companies for Working Parents, Best Companies for Dads, and Top 75 Companies for Executive Women. To foster a culture of inclusivity throughout our workforce, workplace, and marketplace, Transamerica offers a wide range of diversity and inclusion programs. This includes our company-sponsored, employee-driven Employee Resource Groups (ERGs), which are formed around a shared interest or a common characteristic of diversity. ERGs are open to all employees. They provide a supportive environment to help us better appreciate our similarities and differences and understand how they benefit us all.