Application Integration & Security Engineer

Description

Job Summary: Responsible for driving the adoption of secure development practices (Secure SDLC / DevSecOps) and ensuring compliance with corporate standards. Key Highlights: 1. Lead the transformation of the insurance industry with a clear purpose. 2. A collaborative community committed to a safer future. 3. Opportunity for professional growth and making an impact. With over 150 years of history and presence in more than 40 countries, MetLife is leading the global transformation of the insurance industry. United by a shared purpose and diverse perspectives, we are a collaborative community of more than 40\.000 colleagues worldwide, committed to building a safer future for all our key stakeholders: colleagues, customers, shareholders, and the communities we serve. **What is the mission of this role?** To drive the adoption of secure development practices across the software development lifecycle (Secure SDLC / DevSecOps), ensuring that applications and integrations comply with corporate security, quality, and architectural standards through practical implementation of controls, automation, and technical guidance to teams. * Design and implement secure integration patterns (APIs, events, messaging, middleware). * Ensure integrations between internal applications, cloud services, and third parties adhere to corporate standards. * Collaborate with development teams to adopt integration frameworks and practices aligned with security and architectural standards. * Support development teams in applying security practices during design, development, testing, and deployment (Shift\-Left in SDLC). * Participate in risk assessments and validation of security controls for initiatives within the area. * Integrate and interpret security testing results (SAST, DAST, SCA, and complementary controls) into CI/CD pipelines. * Guide teams in remediating security findings and technical debt related to secure design. * Analyze scanning results and prioritize risks based on criticality and business context. * Monitor and contribute to the health of the application portfolio from the perspective of application security and remediation efforts. * Support development teams during audits, security exceptions, and compliance activities as applicable. * Provide technical support and justification for decisions related to API security, integrations, and secure development to control teams (e.g., Cybersecurity/ITRS). **To help you succeed, it is important that you have…** * A professional degree in Computer Engineering, Civil Computer Engineering, Software Engineering, or a related field. * 3–5 years of experience in software development and/or application engineering. * Practical experience with integrations and APIs (ideally API Management / APIM). * Experience in DevOps or DevSecOps environments, participating in the application of security controls within the development lifecycle. * Familiarity with CI/CD tools (Azure DevOps, GitHub Actions, Jenkins, or GitLab). * Knowledge of application security tools such as Veracode, Checkmarx, Prisma, Snyk, or equivalents; and their testing types (SAST, DAST, SCA, Secret Scanning, or similar). * Understanding of authentication, authorization, and secure API management (OAuth2, OpenID Connect, JWT). * Knowledge of cloud platforms (Azure preferred) and container fundamentals. * Ability to automate technical tasks using scripting or other tools. * Intermediate technical English (preferred). We are an inclusive company focused on fostering a collaborative work environment among teams and cultivating a culture that values and respects our differences through non-discriminatory treatment. If you are a person with a disability, you may indicate necessary accommodations for an optimal process, such as sign language interpretation, building accessibility, elevators, etc., in accordance with Law 20\.422\. Are you excited to contribute your experience and skills to a diverse team of talented individuals? If you seek professional growth and an opportunity to make an impact, we invite you to apply for this position. Join MetLife and discover all that we can build together!