Solutions Engineer, Cybersecurity

Description

We deliver our customers peace of mind every day by helping them protect what they value most. Our passion for placing the customer at the center of everything we do is driving a transformational shift at Liberty Mutual. Operating as a tech startup within a Fortune 100 company, we are leading a digital disruption that will redefine how people experience insurance.

At Liberty, you'll thrive in a hybrid setting that fosters in-person collaboration, innovation and growth. This approach optimizes both remote and in-person interactions, enabling you to connect and ideate with your team and deepen valuable relationships across the company, while still enjoying the flexibility of remote work for focused tasks and projects.

This role has a hybrid work schedule (2 days onsite) and we are considering candidates based in Portsmouth, NH, Boston, MA, Plano, TX, Indianapolis, IN and Columbus, OH.

You must be authorized to work in the United States without employer sponsorship now or in the future. We will not sponsor employment visas. Candidates who will require future sponsorship, including candidates on CPT/OPT/STEMOPT who will require future sponsorship, are not eligible to apply.

Hiring Manager - Peter Capraro

Job Introduction:

Liberty Mutual’s Global Cybersecurity (GCS) organization is seeking a Solutions Engineer, Cybersecurity to join the Business Information Security Office (BISO) team supporting Corporate Technology, Global Finance Technology. This is a senior consultative cybersecurity role focused on enabling business outcomes through practical, risk-informed security guidance.

The Business Information Security Office (BISO) serves as a strategic bridge between Liberty Mutual’s business and technology organizations and Global Cybersecurity. The team works closely with business and technology leaders to embed cybersecurity into planning, design, delivery, and operations. Supporting Corporate Technology, Global Finance Technology, this role will help drive secure outcomes across critical enterprise capabilities while enabling innovation, resilience, and responsible risk-taking.

In this role, you will serve as a trusted advisor to technology and business partners, helping teams identify cybersecurity risks early, design secure solutions, and align to enterprise security standards, policies, and regulatory expectations. You will partner closely with leaders, architects, engineers, product teams, and control functions across a diverse portfolio of initiatives and platforms.

This role is ideal for a cybersecurity professional who combines strong technical breadth with excellent relationship management skills, sound judgment, and the ability to influence secure decision-making in a complex enterprise environment. The successful candidate will bring a consultative mindset and experience navigating a broad range of security domains, including but not limited to application security, cloud security, identity and access management, data protection, third-party risk, governance, and secure technology delivery practices.

About this Job:

• Serve as a primary cybersecurity advisor to stakeholders across Corporate Technology, Global Finance Technology.
• Partner with business and technology teams to proactively identify, assess, and manage cybersecurity risks across strategic initiatives, platforms, and operational processes.
• Provide consultative guidance on the secure design and implementation of solutions involving but not limited to:
• Artificial Intelligence and AI enabled systems

• • Enterprise applications and platforms
  • Cloud and SaaS services
  • APIs and integrations
  • Identity and access management
  • Data platforms and data flows
  • Digital and employee experience technologies
  • Third-party/vendor solutions

• • Incident Response
• Review architectures, designs, and implementation approaches to ensure alignment with Liberty Mutual cybersecurity standards, control requirements, and risk appetite.
• Translate cybersecurity policies, standards, and regulatory obligations into clear, actionable guidance for business and technology teams.
• Partner with enterprise architects, engineers, and product teams to define pragmatic security requirements and compensating controls that support delivery and resilience.
• Facilitate risk discussions and help teams prioritize remediation activities based on business context and materiality.
• Provide guidance across multiple cybersecurity domains, including secure software development, threat and vulnerability management, cloud security, IAM, and data protection.
• Collaborate with central cybersecurity teams and control partners to ensure consistent application of enterprise controls and effective escalation of material risks.
• Influence adoption of secure-by-design principles, reusable security patterns, and scalable practices that improve cybersecurity maturity across the supported portfolio.
• Communicate cybersecurity risks, recommendations, and tradeoffs effectively to both technical and non-technical stakeholders, including senior leaders.
• Monitor changes in the business, threat landscape, technology stack, and regulatory environment to proactively identify emerging risks and opportunities for improvement.

Qualifications

• Bachelor’s degree in relevant field (business, computer science, etc.). Master’s degree preferred.
• Prior experience in a highly consultative role bridging between technology partners delivering product features and capabilities and enterprise cybersecurity.
• Significant experience in cybersecurity across all disciplines including but not limited to, information security engineering, architecture, application security, cloud security, technology risk, IAM, threat intelligence, policies and standards and related cybersecurity disciplines.
• Demonstrated experience and success in a consultative cybersecurity role, advising business and technology teams in complex enterprise environments.
• Experience assessing cybersecurity risks and recommending practical, business-aligned solutions across a broad range of technologies and delivery models.
• Strong understanding of core cybersecurity principles and multiple security domains, including:
  • Artificial intelligence fundamentals
  • Application security
  • Secure SDLC / DevSecOps concepts
  • Cloud security
  • Identity and access management
  • Vulnerability and configuration management
  • Network/infrastructure security concepts
  • Data protection and privacy
  • Security monitoring and incident response concepts
• Experience reviewing architecture and solution designs and translating security requirements into implementation guidance.
• Strong stakeholder management, facilitation, and influencing skills, with the ability to work effectively across teams.
• Excellent verbal and written communication skills, including the ability to present risk and recommendations clearly to senior leadership.
• Strong analytical and problem-solving skills with a practical, risk-based approach to decision-making.

Travel