Sr. Information Security Analyst

We’re not like other insurance companies. From our specialty products to our business model, our culture to our results — we’re different. Different is who we are, and how we work, interact, deliver and succeed together. Creating a different and better insurance experience doesn’t just happen. It takes focus and a shared passion for going beyond the expected to forge relationships and deliver care that makes a difference.

This approach rises from and is supported by our talented, ethical and smart team of employee owners united around a single purpose: to work alongside our customers and partners when they need us, in unexpected ways, with exceptional results. Apply today to make a difference with us.

We’re not like other insurance companies. From our specialty products to our business model, our culture to our results — we’re different. Different is who we are, and how we work, interact, deliver and succeed together. Creating a different and better insurance experience doesn’t just happen. It takes focus and a shared passion for going beyond the expected to forge relationships and deliver care that makes a difference.

This approach rises from and is supported by our talented, ethical and smart team of employee owners united around a single purpose: to work alongside our customers and partners when they need us, in unexpected ways, with exceptional results. Apply today to make a difference with us. RLI is a Glassdoor Best Places to Work company with a strong, successful background.

For decades, our financial track record has been stellar — a testament to our culture and validation of our reputation as an excellent underwriting company.

The Senior Information Security Analyst is a senior technical member of the Information Security team responsible for improving RLI's security operations while driving application vulnerability management, and automation. The role combines hands-on security operations and incident response. The primary focus of this position is application vulnerability management and remediation. The role also requires strong security operations and incident response fundamentals, along with the ability to automate recurring work and collaborate effectively with software development teams.

• Lead application-focused vulnerability management and help technology teams move findings from identification through validated remediation.
• Translate penetration test, application security, dependency, and vulnerability findings into clear, developer-actionable remediation guidance.
• Prioritize vulnerabilities using severity, exploitability, application criticality, data sensitivity, exposure, and business risk.
• Build reusable remediation patterns, templates, examples, and technical guidance for recurring application vulnerabilities.
• Analyze vulnerability trends to identify recurring root causes.
• Partner with development leadership and product teams to improve remediation expectations, time-to-fix, and fix-rate outcomes.
• Validate remediation and support documented risk acceptance when remediation is not feasible within required timelines.
• Support penetration testing, security assessments, and technical risk assessments.
• Assist with internal and external audits, vulnerability assessments, penetration tests, and regulatory or compliance activities.

• Operate and support SIEM and security monitoring capabilities, including event investigation, log analysis, alert tuning, dashboards, enrichment, and investigation workflows.
• Monitor, investigate, and respond to security events and incidents across endpoint,…