Description
We are seeking a Lead Security Architect to play a key role in shaping the security blueprint for our organization by aligning security architecture and infrastructure with enterprise business and technology priorities.
As a Lead Security Architect, you will partner with EIP and business leaders to assess emerging threats, identify architectural gaps, and design forward-looking security solutions that strengthen Humana's overall security posture.
Responsibilities:
- Perform application security assessments, threat models, and enforce design patterns while integrating them into a modern SDLC.
- Determine security architecture requirements by evaluating business strategies and requirements.
- Propose and advise solutions or strategies that address business segment security risks or gaps.
- Use independent judgment requiring analysis of variable factors and determining the best course of action.
- Serve as a single point of contact and develop relationships with business segment (line of business).
- Proactively communicate design and secure development principles to appropriate stakeholders.
- Proactively improve security designs to reduce vulnerabilities found after development of code.
- Influence stakeholders to correct security deficiencies in the solution design as well as developed code.
- Provide solutions to security deficiencies while allowing for necessary business and technical functionality.
- Automation and standardization of all applicable processes.
Requirements:
- Bachelor's degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.).
- 8+ years of cybersecurity experience with at least 5 years focused on security architecture.
- Experience performing threat modeling and application security assessments.
- Experience integrating security controls into modern SDLC and DevSecOps environments.
- Experience conducting architecture and design reviews for enterprise applications.
- Experience remediating security vulnerabilities and advising engineering teams on secure design practices.
- Experience securing APIs, web applications, and cloud-based workloads.
- Experience working within Azure, AWS, or GCP cloud environments.
- Experience communicating security risks and recommendations to technical and business stakeholders.
- Experience implementing enterprise security technologies with organization-wide impact.
Preferred Qualifications:
- Master's Degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.).
- CISSP or CEH or similar certification.
- Experience in Product or Application Security.
- Architecture Certification in one of the leading cloud platforms.
Benefits:
- Competitive benefits that support whole-person well-being, including medical, dental, and vision benefits, 401(k) retirement savings plan, time off, and more.
Salary: $142,300 - $195,700 per year