Qureos Mentor

Continental General

<div>SENIOR QE (SDET) AUTOMATION ENGINEER 
(Full Time, Salary, Exempt) 
Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others! 
 
About Continental General: 
The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 200,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions. 
Position Summary:
As a Sr. QE Automation Engineer, you will be the primary technical lead for our Quality Engineering ecosystem. You will design, implement (hands on experience is MUST), and scale End-To-End automation frameworks for UI and API layers, while pioneering the integration of AI first mindset and tools adoption from legacy workflows ensuring our rapid release cycles are backed by a robust, &ldquo;self-healing&rdquo; scalable automation suite. This role requires a hybrid of elite software development skills in QE and a strategic and collaborative architectural mindset to &ldquo;Shift Left&rdquo; and drive a culture of Quality.
.
Key Responsibilities:
<ul><li>Automation Framework Architecture: Design and build modular, maintainable, and scalable automation E2E frameworks from scratch for complex, dynamic UI (e.g., Playwright, Selenium) and API (e.g., REST Assured, Postman).</li><li>
AI Tooling Integration: Lead the adoption of AI-driven capabilities such as self-healing test scripts, AI generated test cases using LLM&rsquo;s (Open AI, Claude), and intelligent defect prediction.</li><li>
DevOps Integration: Integrate the automation scripts for functional, regression, performance, and end-to-end into CI/CD pipelines (GitHub Actions, Jenkins, AWS CodePipeline).</li><li>
QE Technical Leadership: Establish the best automation practices, coding standards, and reusable component libraries to be used across teams / projects.</li><li>
Strategy &amp; Collaboration: Partner with developers, and product owners to define test strategies (TDD/BDD) and ensure deep testability is built into the product from day one.</li><li>
Mentorship: Provide technical guidance, organize continuous learning to transition manual QA engineers into automation capable Quality Engineers, and code reviews for SDET&rsquo;s and QE engineers to elevate the team&rsquo;s overall engineering maturity.</li><li>
Data &amp; Compliance: Architect test data management strategies that manage sensitive PHI/PII data while maintaining regulatory compliance.</li></ul>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in computer science, Information Technology, or a related field, or the equivalent years of education and experience required.</li><li>
A minimum of 4 years of experience in SDET role, with at least 2 years in design and implementation of QE test automations frameworks.</li><li>
Experience in the insurance or finance industry is highly preferred.</li></ul>
Technical Skills:<ul><li>
Expert hands-on experience with test automation frameworks and tools (Selenium Web Driver, Playwright, TestNG, Junit, AI tools).</li><li>
Mastery of one or more test automation foundations such as Page Object Model (POM), and Page Component Object Model (PCOM) for robust automation.</li><li>
Expertise with API testing and automations tools (Postman, REST Assured, SOAP UI).</li><li>
Experience with performance / scalability testing and automation tools (JMeter, Gatling).</li><li>
Experience with CI/CD pipelines and tools (AWS Code Pipeline, Jenkins, GitHub Actions).</li><li>
Foundational and working knowledge of LLMs and usage of Gen AI or Agentic AI testing frameworks (Open AI, Claude) to optimize test maintenance and improved automation execution efficiency.</li><li>
Experience with DevOps containerization and orchestration (Docker, Kubernetes, and cloud-native testing environments).</li><li>
Proficiency in test management tools (Jira, Zephyr, TestRail).</li><li>
Understanding of security testing principles and tools.</li><li>
Well versed in Agile, DevOps and TDD/BDD methodologies..</li><li>
Experience with Sapiens&rsquo; coresuite proprietary &ldquo;Automated Testing Services&rdquo; framework and Afficiency&rsquo;s SaaS eco system API validation is highly preferred.</li></ul>
Why Join Us?<ul><li>
Competitive salary and benefits, including 401(k), health insurance, and performance-based bonuses.</li><li>
Collaborative and fast-paced work environment.</li><li>
Professional development and growth opportunities within the finance and investment space.</li></ul>
Benefits:<ul><li>
Competitive Salary &amp; Target Bonus Program</li><li>
Retirement Savings &ndash; 401(k) with a company match</li><li>
Comprehensive Healthcare &ndash; Medical (BlueCross BlueShield), company-paid dental, vision, short-term &amp; long-term disability, and life insurance.</li><li>
Work-Life Balance &ndash; 20+ days of PTO, 10 paid holidays, and paid volunteer time off.</li><li>
Flexible Work Options &amp; Perks &ndash; Hybrid and remote opportunities, wellness programs, and weekly paid lunch for onsite staff.</li><li>
Health Savings &amp; Flexible Spending Accounts &ndash; Includes a company match for HSAs.</li></ul></div>

Senior QE (SDET) Automation Engineer

<div>SENIOR IDENTITY SECURITY ENGINEER
(Full Time, Salary, Exempt)
Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others!
About Continental General:
The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 200,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions.
Position Summary:
The Senior Identity Security Engineer is a hands-on technical contributor responsible for designing, automating, and continuously improving identity lifecycle controls, governance, and accountability across Okta, AWS IAM, and the broader SaaS and cloud environment. The core of this work is eliminating manual identity processes through HRIS and Role-Based automation, Okta Workflows, Lambda functions, and API-first integrations, so that all facets of the identity lifecycle happen reliably at the speed of the business, not at the speed of a ticket queue.
You will build and maintain the systems that govern how every human and non-human identity in the organization receive, update, and securely deprovision application entitlements. You treat JML lifecycle events, quarterly access reviews, compliance evidence collection, and PAM enforcement not as recurring manual tasks but as engineering problems to be solved once and run durably. Automation is the default answer; manual execution is the exception you are actively working to eliminate.
This role is well-suited for an engineer who is self-directed, brings a strong sense of craft to identity engineering, and stays ahead of the field by experimenting with tools before they become mainstream. You are comfortable using AI-assisted development tools such as Claude Code to accelerate Okta Workflow development, Lambda scripting, and API integrations, and you actively look for identity-domain automation opportunities that others have not yet identified.
Key Responsibilities:<ul><li>
Identity Lifecycle Management &amp; Automation<ul><li>
Design, implement, and maintain joiner/mover/leaver automations using Okta Identity Lifecycle Management, Okta Workflows, and HRIS integrations; target zero manual intervention for standard lifecycle events.</li><li>
Build API-driven provisioning and deprovisioning pipelines that eliminate manual access ticketing; engineer birthright access entitlements aligned to department, role, and location attributes.</li><li>
Engineer contractor lifecycle controls including time-bound entitlement grants, auto-expiry enforcement, and multi-system deprovisioning triggered on contract end-date without manual coordination.</li><li>
Systematically identify existing manual identity operations across the environment and own the backlog of automation opportunities through to production delivery.</li><li>
Instrument lifecycle workflows leveraging preemptive alerting to detect failures, delays, or partial completions before they become security or compliance findings.</li></ul></li><li>
Federation &amp; Application Integration<ul><li>
Architect and implement SAML/OIDC/OAuth federations with Okta as IdP, including JIT provisioning, group-push, and lifecycle event automation for onboarded applications.</li><li>
Build and maintain SCIM connectors and REST API integrations for SaaS applications; engineer custom provisioning logic for non-SCIM-native systems using Okta Workflows and Lambda.</li><li>
Partner with application owners to define application role models, complete federation onboarding from technical design through production rollout, and ensure consistent MFA enforcement across all integrated applications.</li><li>
Maintain a federated application inventory with documented integration patterns, lifecycle coverage, and gap analysis for applications not yet under centralized identity control.</li></ul></li><li>
Non-Human Identity (NHI) Governance<ul><li>
Inventory and govern service accounts, API keys, OAuth tokens, and automation credentials across AWS, Okta, SaaS platforms, and CI/CD pipelines; enforce ownership, scoped permissions, and rotation policies.</li><li>
Leverage Okta ISPM, AWS Lambda, and scripted tooling to surface orphaned, over-privileged, or stale machine identities; automate detection and remediation where possible.</li><li><ul><li>Establish governance patterns for AI agent identities as agentic workloads expand in the environment; enforce least-privilege and auditability controls consistent with human identity standards.</li></ul></li><li>
Integrate NHI lifecycle into the broader JML process: when a developer leaves or an application is decommissioned, associated machine identities are automatically flagged for review and revocation.</li></ul></li><li>
Privileged Access &amp; Secrets Management<ul><li>
Design and implement PAM protections for high-priority resources and privileged user accounts; collaborate with application owners to identify and protect sensitive administrative surfaces.</li><li>
Engineer secrets management for cloud workloads, CI/CD pipelines, and SaaS integrations using AWS Secrets Manager or equivalent; eliminate hardcoded credentials and unrotated static secrets.</li><li>
Drive adoption of just-in-time access patterns; reduce standing privilege exposure by converting persistent admin grants to time-limited, approval-gated elevation workflows.</li><li>
Develop and maintain least-privilege IAM architectures for AWS workloads, including permission boundaries, service control policies, and cross-account role patterns.</li></ul></li><li>
Compliance, Attestation &amp; Access Governance<ul><li>
Engineer automated quarterly entitlement recertification, and segregation of duties reviews; reduce manual reviewer burden through pre-computed access analytics and targeted exception-only workflows.</li><li>
Build evidence collection pipelines for SOC 2 and HIPAA audits using identity platform telemetry and audit logs, replacing manual evidence exports with durable, repeatable reporting.</li><li>
Design and produce IGA reports covering entitlement distribution, least-privilege compliance, SoD violations, and access age; establish a mechanism to make these reports available on-demand.</li><li>
Maintain auditable access request and approval workflows with defined expiry, automated closure, and integration into ITSM or governance tooling.</li></ul></li><li>
AI-Assisted Development &amp; Automation-First Engineering<ul><li>
Use AI-assisted development tools to accelerate Okta Workflow development, Lambda scripting, Python automation, and API integrations; reduce time-to-production for automation initiatives.</li><li>
Approach every recurring manual identity operation as a candidate for full automation; document automation coverage gaps, prioritize by risk and volume, and deliver against the backlog.</li><li>
Proactively evaluate emerging identity tooling, IGA platform capabilities, and agentic workflow patterns; bring validated approaches to the team before they become industry standard practice.</li></ul></li></ul>
Required Qualifications:<ul><li>
5+ years of hands-on IAM or security engineering experience with an Enterprise-level Identity Management platform such as Okta Identity Lifecycle Management, Okta Workflows, and AWS IAM automation in production environments.</li><li>
Proficiency in at least one scripting or programming language (Python, PowerShell, or JavaScript) for API integration, Okta Workflows extension, and Lambda-based automation.</li><li>
Demonstrated experience designing and implementing SAML/OIDC/OAuth federation patterns with Okta as IdP, including JIT provisioning and lifecycle event management.</li><li>
Proven track record of automating manual identity operations: JML workflows, access review processes, provisioning pipelines, or compliance evidence collection.</li><li>
Hands-on AWS IAM experience including cross-account roles, permission boundaries, SCPs, and least-privilege design across multi-account environments.</li><li>
Working knowledge of HRIS integration patterns (SCIM, REST API) as authoritative sources of truth for identity lifecycle events.</li><li>
Familiarity with SOC 2 and HIPAA identity governance requirements, including access review, evidence retention, and segregation of duties obligations.</li><li>
Genuine curiosity and an early-adopter instinct for AI-assisted development tools; demonstrated habit of applying these tools to accelerate engineering delivery and reduce manual workflows.</li><li>
Self-directed working style with the ability to scope, prioritize, and execute automation initiatives from design through production without close direction.</li></ul>
Preferred Qualifications:<ul><li>
Experience with PAM tooling and just-in-time access patterns in an enterprise environment.</li><li>
Non-human identity governance experience: service account lifecycle management, API key inventory and rotation, secrets management across cloud and CI/CD environments.</li><li>
Okta certifications (Okta Certified Professional, Administrator, Consultant, or Developer).</li><li>
Infrastructure as Code experience (Terraform or CloudFormation) for IAM and identity resource management.</li><li>
Audit and compliance exposure in a regulated environment, preferably healthcare, insurance, or financial services.</li><li>
Hands-on experience with AI-assisted development tools applied to identity engineering or security automation workflows.</li><li>
Relevant security certifications: GIAC (GCIA, GCIH, GCED), CISSP, or equivalent.</li></ul>
Why Join Us?<ul><li>
Competitive salary and benefits, including 401(k), health insurance, and performance-based bonuses.</li><li>
Collaborative and fast-paced work environment.</li><li>
Professional development and growth opportunities within the finance and investment space.</li></ul>
Benefits:<ul><li>
Competitive Salary &amp; Target Bonus Program</li><li>
Retirement Savings &ndash; 401(k) with a company match</li><li>
Comprehensive Medical insurance through BlueCross BlueShield of Texas. Company-paid dental, vision, short-term &amp; long-term disability, and life insurance.</li><li>
Work-Life Balance &ndash; This role offers 20+ days of PTO, 10 paid holidays, and paid volunteer time off.</li><li>
Flexible Work Options &amp; Perks &ndash; Hybrid opportunity, wellness programs, and weekly paid lunch for onsite staff.</li><li>
Health Savings Accounts (HSA) &amp; Flexible Spending Accounts (FSAs) &ndash; Includes a company match for HSAs.</li></ul></div>

Senior Identity Security Engineer

SECURITY OPERATIONS LEAD SECURITY ANALYST(Full Time, Salary, Exempt)Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others!About Continental General:The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 200,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions.Position Summary:The Lead Security Analyst serves as the senior technical escalation point within the Security Operations Center and plays a central role in advancing detection, response, and automation capabilities. In this role, you will lead complex investigations, serve as the primary escalation path to Security Engineering, and drive the continuous evolution of SOC playbooks, processes, and strategic initiatives.You will leverage AI-driven automation and SOAR orchestration to reduce response times, standardize actions, and increase operational efficiency across the SOC. The Lead Security Analyst partners closely with cloud, identity, data, and application security teams to expand observability coverage, enrich telemetry, and improve detection fidelity across distributed environments.This position develops and maintains security operations metrics, reporting, and executive insights that demonstrate operational health, detection coverage, and continuous improvement of the security posture. As a senior individual contributor, you will influence platform direction and collaborate across security disciplines to ensure alignment between day-to-day operations and long-term security strategy.Key Responsibilities:Incident Response Leadership<ul><li>Act as incident leader for major security events, coordinating response across SOC, IT, cloud, DevOps, and business stakeholders in alignment with established IR frameworks.</li><li>Drive containment, eradication, and recovery decisions based on business impact, adversary behavior, and risk to critical systems and data.</li><li>Provide real-time tactical and technical direction to analysts during escalations, ensuring consistent execution of IR playbooks and runbooks.</li><li>Coordinate stakeholder communications and ensure all incidents are documented with clear timelines, evidence, and root-cause analysis.</li><li>Lead post-incident reviews and translate lessons learned into new detections, controls, and process improvements.</li></ul>Detection Engineering &amp; Threat Hunting<ul><li>Partner with detection engineering and platform owners to design and maintain high-value detections mapped to adversarial TTPs and prioritized by business risk.</li><li>Lead proactive threat hunts across cloud, endpoint, identity, email, and SaaS environments using hypothesis-driven methodologies and threat intelligence.</li><li>Identify detection and telemetry gaps, proposing new logging requirements, enrichment pipelines, and control changes to expand coverage.</li><li>Evaluate and tune detections using data-driven methods to maximize fidelity and reduce noise.</li><li>Contribute to standards for naming, documentation, QA, and lifecycle management of detection content.</li></ul>Automation, AI &amp; SOAR<ul><li>Own and mature automation strategies for repetitive investigations and containment workflows using SOAR and scripting.</li><li>Design, build, and maintain SOAR playbooks and automation scripts (Python, PowerShell, Bash) to orchestrate enrichment, decisioning, and response actions across tools.</li><li>Identify high-value automation opportunities by analyzing incident patterns and response bottlenecks; measure improvements through MTTR and analyst hours saved.</li><li>Collaborate with Security Engineering to safely incorporate AI-assisted enrichment, correlation, and decisioning into SOC workflows with appropriate oversight.</li></ul>Cloud, Data &amp; Application Security<ul><li>Support cloud detection and response through AWS-native services (Security Hub, GuardDuty, Inspector, Macie) and CSPM platforms such as Wiz, prioritizing misconfigurations and threats across multi-account environments.</li><li>Partner with DLP/DSPM owners (Cyera, Netskope, and similar platforms) to monitor sensitive data movement, identify potential exfiltration, and drive remediation aligned to regulatory requirements.</li><li>Collaborate with application and API owners during investigations to interpret SAST/DAST and API security findings, validate OWASP Top 10 exposure, and support remediation guidance.</li><li>Work with Security Engineering and DevOps to expand observability coverage and ensure security-relevant events are available for detection and forensic analysis.</li></ul>Forensics &amp; Analysis<ul><li>Lead host, cloud, and SaaS forensics during complex incidents, ensuring proper evidence acquisition, preservation, and chain-of-custody.</li><li>Correlate logs and artifacts across SIEM, EDR, SASE, identity, cloud, and application telemetry to determine attack path, root cause, and blast radius.</li><li>Produce clear analytic narratives that connect technical findings to business impact and actionable remediation steps.</li><li>Recommend containment, eradication, and hardening actions; feed recurring patterns back into detection and prevention controls.</li></ul>Process, Metrics &amp; Continuous Improvement<ul><li>Own and refine SOC playbooks, runbooks, and IR workflows to stay current with tooling, architecture changes, and lessons learned.</li><li>Lead structured post-incident reviews and ensure follow-up actions are tracked through completion.</li><li>Define and maintain SOC metrics and reporting (MTTD, MTTR, alert trends, dwell time, ATT&amp;CK coverage) that demonstrate operational health and effectiveness.</li><li>Recommend new tools, integrations, logging sources, and process changes based on IR trends, threat landscape shifts, and detection gaps.</li><li>Collaborate with cloud, appsec, identity, and GRC teams to align SOC operations with broader security strategy and expand observability across critical platforms.</li></ul>Required Qualifications:<ul><li>5+ years of hands-on experience in cybersecurity operations, including incident response, threat hunting, or detection engineering within a modern SOC environment.</li><li>Demonstrated expertise with enterprise SIEM platforms (Splunk preferred), including development and tuning of custom detections, correlation logic, and alerting use cases.</li><li>Experience analyzing and responding to events across endpoint, cloud, identity, email, and network telemetry sources.</li><li>Hands-on experience with AWS security services (GuardDuty, Security Hub, Inspector, Macie) and practical knowledge of cloud threat models across multi-account environments.</li><li>Strong working knowledge of adversary TTPs (MITRE ATT&amp;CK), with the ability to map incidents and detections to relevant techniques.</li><li>Proficiency with scripting or automation languages (Python, PowerShell, or Bash) for investigation, enrichment, or workflow automation.</li><li>Working knowledge of SOAR platforms and experience building or maintaining automated playbooks and enrichment workflows.</li><li>Practical understanding of application and API security fundamentals, including OWASP Top 10 and common API attack vectors, with ability to support remediation guidance.</li><li>Ability to communicate complex technical findings to both technical and non-technical stakeholders through clear written reporting.</li></ul>Preferred Qualifications:<ul><li>Hands-on familiarity with web application and API security testing tools (Burp Suite, Kali Linux, or similar intercept-proxy techniques).</li><li>Experience performing manual validation of web application vulnerabilities and API security misconfigurations (authentication flows, tokens, access control).</li><li>Experience with CSPM platforms (Wiz preferred) and applying remediation guidance across multi-account AWS environments.</li><li>AI-assisted enrichment, correlation, or decision-support integration in SOC workflows.</li><li>Demonstrated engagement with cybersecurity skills development through CTF platforms such as HackTheBox, TryHackMe, or similar environments.</li><li>Understanding of secure coding principles, common application-layer weaknesses, and modern cloud-native architectures.</li><li>Relevant certifications: GIAC (GCIH, GCFA, GDAT), CompTIA CySA+, or equivalent.</li></ul>Pay: $120,000.00 - $135,000.00 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Application Question(s):<ul><li>Can you work our hybrid schedule in Austin, with in‑office days Monday through Wednesday and remote work on Thursdays and Fridays?</li></ul>* How many years of hands-on experience do you have in security operations, incident response, or threat hunting within a SOC environment?<ul><li>Do you have experience developing or tuning detections and correlation rules in an enterprise SIEM platform such as Splunk?</li><li>Have you worked with AWS security services such as GuardDuty, Security Hub, Inspector, or Macie in a multi-account environment?</li><li>Do you have experience building or maintaining SOAR playbooks or automation scripts (Python, PowerShell, or Bash) for security operations workflows?</li></ul>* Do you have experience working with vulnerability management programs, including triaging findings, tracking remediation, or coordinating with asset owners?Work Location: Hybrid remote in Austin, TX 78717

Security Operations Lead Security Analyst

<div>TPA BUSINESS ANALYST 
(Full Time, Salary, Exempt) 
Continental General - Austin, Texas
Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others!
About Continental General:
The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 100,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions.
Position Overview:
We are seeking a detail-oriented and strategic Business Analyst to join our Third-Party Administrator (TPA) team specializing in life, annuity, and long-term care. This role will focus on gathering, analyzing, and documenting business requirements related to processes, correspondence, and systems used in the servicing of policyholders, agents, and carriers in order to support the creation and testing of user acceptance test scripts. The ideal candidate will bridge business needs with technical solutions, ensuring accurate, timely delivery of solutions that align with client expectations. 
 
Key Responsibilities:
<ul><li>Collaborate with internal teams and insurance carrier clients to gather, analyze, and document business requirements for TPA-related insurance processes and systems.</li><li>
Analyze existing processes and identify areas for improvement or automation.</li><li>
Develop functional specifications, process maps, and use cases to support system enhancements and process improvements.</li><li>
Support the facilitation of user acceptance testing (UAT) and coordinate implementation of solutions with IT and business users.</li><li>
Work with User Acceptance Testing leads, ensuring accurate solutions are in place based on defined requirements.</li><li>
Coordinate testing and validation of correspondence outputs to ensure accuracy and compliance.</li><li>
Support the onboarding of new TPA partners, including due diligence.</li><li>
Stay current with industry trends, regulatory changes, and best practices in insurance and TPA operations.</li><li>
Serve as a liaison between business units, IT, value streams, and client representatives to ensure solutions meet business and regulatory needs.</li><li>
Provide regular updates and reporting on testing performance and issues.</li><li>
Support audits and quality reviews by providing documentation and analysis.</li></ul>
<h2 class="jobSectionHeader"><div>Qualifications:</div></h2><ul><li>
Bachelor&rsquo;s degree in Business, Information Systems, Communications, or equivalent business experience.</li><li>
5+ years of experience as a Business Analyst, preferably in insurance or TPA environments.</li><li>
Familiarity with life, annuity, and/or long-term care products.</li><li>
Experience with insurance administration platforms and ancillary systems (workflow, imaging, GL, etc.).</li><li>
Experience with financial extracts (related to premiums and commissions) is a plus.</li><li>
Strong analytical, organizational, and communication skills.</li><li>
Proficiency in Microsoft Office Suite.</li></ul><h2 class="jobSectionHeader"><div>
Preferred Skills:</div></h2><ul><li>
Experience working in Agile or hybrid project environments.</li><li>
Ability to manage multiple priorities and stakeholders effectively.</li></ul> 
Why Join Us?<ul><li>
Opportunity to directly drive to growth and scale efforts at a dynamic and innovative company.</li><li>
Competitive salary and benefits</li><li>
Collaborative and fast-paced work environment.</li><li>
Professional development and growth opportunities within the insurance space.</li></ul>
Benefits:<ul><li>
Competitive Salary &amp; Target Bonus Program</li><li>
Retirement Savings &ndash; 401(k) with a company match</li><li>
Comprehensive Medical insurance through BlueCross BlueShield of Texas. Company-paid dental, vision, short-term &amp; long-term disability, and life insurance.</li><li>
Work-Life Balance &ndash; This role offers 25 days of PTO, 10 paid holidays, and paid volunteer time off.</li><li>
Flexible Work Options &amp; Perks &ndash; Hybrid opportunity, wellness programs, and weekly paid lunch for onsite staff.</li><li>
Health Savings Accounts (HSA) &amp; Flexible Spending Accounts (FSAs) &ndash; Includes a company match for HSAs.</li></ul></div>

TPA Business Analyst

<div>SENIOR SECURITY ENGINEER
(Full Time, Salary, Exempt)
Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others!
About Continental General:
The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 200,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions.
Position Summary:
The Senior Security Engineer is a hands-on technical contributor responsible for advancing security platforms, detections, automation, and cloud security capabilities across AWS, SaaS, and enterprise environments. In this role, you will own engineering execution across major security initiatives, build and tune platform integrations, improve observability, and expand detection and response capabilities through modern engineering practices including AI-assisted development.
You will design and implement detections, develop SOAR and automation workflows, and enhance cloud security guardrails. The Senior Security Engineer partners closely with cloud, identity, SASE, and application security teams to engineer controls, expand telemetry, and build scalable detection and response capabilities. You approach this work with a genuine curiosity about emerging tools and techniques, actively seeking out new ways to accelerate delivery and reduce manual effort through AI and automation.
This role is well-suited for an engineer who is self-directed and comfortable operating without heavy oversight, who brings a strong sense of craft to their work, and who stays ahead of the field by experimenting with tools before they become mainstream. The Senior Security Engineer serves as a reliable, high-output contributor between the SOC and platform engineering, ensuring operational needs translate into durable, scalable technical solutions.
Key Responsibilities:<ul><li>
Platform Engineering &amp; Technical Direction<ul><li>
Own engineering and advanced configuration across SIEM, SOAR, CSPM, EDR, SASE, and data security platforms.</li><li>
Build integrations, logging pipelines, and enrichment logic across AWS, SaaS, and identity providers.</li><li>
Contribute to platform strategy, participate in technology selection and proof-of-concept evaluations.</li><li>
Apply and help refine engineering standards for logging, telemetry, detection content, and automation practices.</li></ul></li><li>
Detection Engineering &amp; Telemetry<ul><li>
Develop and tune detections mapped to MITRE ATT&amp;CK, cloud threats, and environment-specific risk.</li><li>
Build enrichment pipelines, correlation logic, and advanced SIEM analytics (Splunk SPL).</li><li>
Identify logging and telemetry gaps and engineer new data sources across AWS and SaaS platforms.</li><li>
Partner with threat intelligence to incorporate adversary behaviors into detection logic and hunting hypotheses.</li></ul></li><li>
Automation, AI &amp; SOAR<ul><li>
Design and implement SOAR playbooks, enrichment workflows, and automated response actions.</li></ul></li><li><ul><li>Develop automation scripts and APIs (Python, PowerShell, Bash) for security operations functions.</li></ul></li><li><ul><li>
Integrate AI-assisted enrichment, summarization, and decision support into engineering and SOC workflows.</li><li>
Use AI-assisted development tools to accelerate automation build-out, reduce manual workflows, and improve iteration speed on security engineering tasks.</li><li>
Proactively evaluate emerging AI tooling, agentic workflows, and automation integrations for applicability to security operations; bring validated approaches to the team before they become industry standard practice.</li></ul></li><li>
Cloud, CSPM &amp; AWS Security Engineering<ul><li>
Engineer cloud security controls and observability across multi-account AWS environments.</li><li>
Extend CSPM capabilities with custom rules, policies, automation, and remediation pathways.</li><li>
Implement and maintain AWS security guardrails across Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and IAM.</li><li>
Collaborate with cloud engineering and DevOps teams on secure architectures, monitoring patterns, and CloudWatch Logs data protection (PII/PHI masking).</li></ul></li><li>
SASE, DSPM &amp; Data Protection<ul><li>
Support technical implementation and optimization of SASE platforms, including SWG, CASB, and ZTNA control.</li><li>
Integrate DSPM platforms into detection, response, and SOAR workflows.</li><li>
Engineer data visibility and protection controls across SaaS, cloud storage, and API environments.</li><li>
Partner with identity and security teams to drive Zero Trust-enabling controls and telemetry expansion.</li></ul></li><li>
Application &amp; API Security Enablement<ul><li>
Support AppSec and API security by integrating telemetry, SAST/DAST findings, and runtime controls into detection workflows.</li><li>
Engineer detection patterns for OWASP Top 10 vulnerabilities and API misuse patterns.</li><li>
Collaborate with DevSecOps to automate application security validation and implement CI/CD security guardrails.</li></ul></li><li>
Incident Response Engineering<ul><li>
Serve as technical engineering escalation during active security investigations and incident response.</li><li>
Build IR automation, forensic data integrations, and evidence collection workflows.</li><li>
Implement corrective technical controls resulting from post-incident analysis and lessons learned.</li><li>
Contribute engineering work to runbooks, playbooks, and automation patterns shared with the SOC.</li></ul></li></ul>
Required Qualifications:<ul><li>
5+ years of security engineering, detection engineering, or advanced security operations experience.</li><li>
Expertise with SIEM detection development and correlation logic (Splunk preferred), including advanced SPL and analytics authoring.</li><li>
Strong AWS security engineering experience across multi-account environments, including Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and IAM.</li><li>
Proficiency with SOAR platforms and automation scripting (Python, PowerShell, Bash) for SecOps workflow automation.</li><li>
Experience with SASE technologies (SWG, CASB, ZTNA) and/or DSPM platforms in an enterprise environment.</li><li>
Deep working knowledge of adversary TTPs and the MITRE ATT&amp;CK framework applied to detection engineering and threat modeling.</li><li>
Experience integrating cloud and SaaS telemetry into detection and incident response workflows.</li><li>
Genuine curiosity and an early-mover instinct for emerging technologies, including AI-assisted development tools such as Claude Code; demonstrated habit of evaluating and adopting new capabilities ahead of the curve to improve security posture and reduce manual workflows.</li><li>
Self-directed working style with the ability to scope, prioritize, and execute engineering work autonomously across concurrent initiatives without close direction.</li></ul>
Preferred Qualifications:<ul><li>
Hands-on CSPM engineering experience, including custom rules, policies, automation, and remediation workflows.</li><li>
DSPM platform integration and data-centric security controls.</li><li>
SASE platform engineering experience, including SWG, CASB, ZTNA policy configuration.</li><li>
SOAR workflow architecture and automation strategy across multi-platform environments.</li><li>
Relevant certifications: GIAC (GCIA, GCIH, GCED, GDAT), AWS Certifications, CISSP, or equivalent.</li><li>
Hands-on experience with AI-assisted development tools (Claude Code, GitHub Copilot, Cursor, or similar) applied to security engineering or automation workflows.</li></ul>
Why Join Us?<ul><li>
Competitive salary and benefits, including 401(k), health insurance, and performance-based bonuses.</li><li>
Collaborative and fast-paced work environment.</li><li>
Professional development and growth opportunities within the finance and investment space.</li></ul>
Benefits:<ul><li>
Competitive Salary &amp; Target Bonus Program</li><li>
Retirement Savings &ndash; 401(k) with a company match</li><li>
Comprehensive Medical insurance through BlueCross BlueShield of Texas. Company-paid dental, vision, short-term &amp; long-term disability, and life insurance.</li><li>
Work-Life Balance &ndash; This role offers 20+ days of PTO, 10 paid holidays, and paid volunteer time off.</li><li>
Flexible Work Options &amp; Perks &ndash; Hybrid opportunity, wellness programs, and weekly paid lunch for onsite staff.</li><li>
Health Savings Accounts (HSA) &amp; Flexible Spending Accounts (FSAs) &ndash; Includes a company match for HSAs.</li></ul></div>

Senior Security Engineer