Senior Application Security Engineer

Posted:
3/31/2026, 5:26:51 AM

Location(s):
Raleigh, North Carolina, United States ⋅ North Carolina, United States

Experience Level(s):
Senior

Field(s):
IT & Security ⋅ Software Engineering

At Enact, we understand that there’s no place like home. That’s why we bring our deep expertise, insightful offerings, and extra mile service to work every day to help lenders put more people in homes and keep them there.

We’re looking for a Senior Application Security Engineer in Raleigh, NC to join us in fulfilling our mission, while utilizing our values of excellence, improvement, and connection. In this role, you will contribute to advanced application, cloud, and AI security through threat modeling, secure design reviews, and AI security governance while functioning as one of two technical peers to product teams to accelerate secure delivery and mitigate technical risk in production environments.

LOCATION

Enact Headquarters, Raleigh, NC – Hybrid Schedule

YOUR RESPONSIBILITIES

  • Provide advanced application, cloud, and AI security leadership by embedding security expertise directly into software architecture, design, and development workflows.
  • Secure the organization’s use of AI and agentic AI by guiding safe design, privacy controls, model usage, and AI-assisted development practices.
  • Lead advanced application security activities, including threat modeling, secure design reviews, penetration testing, and remediation guidance for internally developed and customer-facing systems.
  • Function as an application security architecture peer to product team subject matter experts, enabling informed challenge and collaboration without slowing delivery.
  • Elevate the effectiveness of the security team through technical mentorship, durable ownership of critical platforms, and reduction of keyperson and vendor dependency.

SUCCESS IN YOUR FIRST YEAR

  • Reduced application and AI-related risk at design time, demonstrated by fewer late-stage security findings, faster resolution of architectural security decisions, and decreased production-impacting issues.
  • Faster, more predictable delivery of secure software, evidenced by earlier security engagement in development cycles, reduced rework, and improved collaboration with engineering and product teams.
  • Increased organizational resilience and capability, including reduced reliance on third-party security firms and improved security team effectiveness through mentorship.

REGULAR COLLABORTIONS

  • Product and cloud engineering teams to embed security into architecture, design, and delivery of cloud-native and AI-enabled systems.
  • Product and technology leaders to align security decisions with business priorities, delivery timelines, and customer impact.

YOUR QUALIFICATIONS

  • Bachelor’s degree in computer science, cybersecurity, information technology, or a related field.
  • 7+ years of experience in application security, including securing custom-built, cloud-native, and distributed systems.
  • Strong understanding how to assess and secure web services including application programming interfaces.
  • Strong understanding how to assess and secure artificial intelligence solutions.
  • Demonstrated technical leadership and mentorship, with the ability to guide engineers and security practitioners through secure design and risk mitigation.
  • Strong risk-based and data-informed approach to prioritizing security work based on impact, likelihood, and business context.
  • Clear understanding of business objectives and delivery pressures, with the ability to align security architecture and recommendations to operational efficiency, customer trust, and regulatory expectations.
  • Offensive Security Certified Expert (OSCE).

PREFERRED QUALIFICATIONS

  • AWS Certified Security - Specialty and/or CSA Trusted AI Safety Expert (TAISE)
  • Experience securing serverless, function-oriented, and event-driven cloud workloads, CI/CD pipelines, and infrastructure-as-code, i.e., Terraform.
  • Strong proficiency in Python for security automation, analysis, and tooling.

COMPANY
Enact Holdings, Inc. (Nasdaq: ACT), operating primarily through its wholly owned subsidiaries, is a leading publicly traded U.S. private mortgage insurance provider, offering borrower-centric products that enable lenders and other partners across the U.S. to help people responsibly achieve and maintain the dream of homeownership.

By empowering customers and their borrowers, Enact seeks to positively impact the lives of those in the communities in which it serves in a sustainable way. Headquartered in Raleigh, North Carolina, we play an active role in supporting a healthier Triangle community. We also support our colleagues’ philanthropic efforts in their home communities across the U.S. Enact values all perspectives, characteristics and experiences, along with providing a positive and inclusive culture for employees to grow and succeed. We strive to create an environment where employees can bring their full, authentic selves to work to help each other and their customers.
 

We are proud to be an equal opportunity employer and all hiring decisions are based on merit, qualifications, and business needs. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

WHY WORK AT ENACT

  • We bring innovative thinking to the situations at hand
  • We seek out and incorporate diverse views to strengthen our outcomes
  • We work on challenging and rewarding projects
  • We offer competitive benefits:
    • Hybrid work schedule (in-office days Tues/Wed/Thurs)
    • Generous Time Off
    • 40 Hours of Volunteer Time Off
    • Tuition Reimbursement and Student Loan Repayment
    • Paid Family Leave and Flexible Spending Accounts
    • 401k with up to 5% employer match
    • Fitness and Emotional Wellness Reimbursements
    • Onsite Gym