Lead Security Architect

This is a fully remote position, open to applicants in District of Columbia, +7 more states.

📋 Description

• Create security architecture components to address both current and future threats.

• Identify deficiencies in the existing enterprise/EIP reference architecture and propose necessary updates.

• Conduct and supervise vulnerability assessments, risk analyses, and security evaluations.

• Ensure that the security requirements of stakeholders are integrated into the enterprise architecture.

• Align the security architecture and infrastructure with the priorities of the business and technology.

• Execute application security evaluations and threat modeling exercises.

• Apply security design patterns within a contemporary Software Development Life Cycle (SDLC).

• Ascertain security architecture needs by analyzing business strategies and requirements.

• Recommend solutions that address security risks and gaps specific to business segments.

• Act as the primary contact for stakeholders within business segments.

• Articulate secure design and development principles effectively.

• Enhance security designs to minimize vulnerabilities after development.

• Persuade stakeholders to rectify security deficiencies identified in designs and code.

• Develop solutions that rectify security shortfalls while maintaining business and technical functionalities.

• Automate and standardize relevant processes.

⛳️ Requirements

• Bachelor’s degree in a relevant field such as Information Technology, Information System Management, or Computer Science.

• Over 8 years of experience in cybersecurity, with a minimum of 5 years dedicated to security architecture.

• Proficient in performing threat modeling and application security evaluations.

• Experienced in incorporating security controls within modern SDLC and DevSecOps frameworks.

• Skilled in conducting architecture and design reviews for enterprise-level applications.

• Knowledgeable in remediating security vulnerabilities and guiding engineering teams on secure design methodologies.

• Experienced in securing APIs, web applications, and cloud-based workloads.

• Familiar with working in Azure, AWS, or GCP cloud environments.

• Capable of communicating security risks and recommendations to both technical and business audiences.

• Experienced in implementing enterprise security technologies that have organization-wide implications.

• A strong passion for contributing to an organization that prioritizes continuous improvement in consumer experiences.

• Access to home internet with a minimum download speed of 25 Mbps and upload speed of 10 Mbps.

• A dedicated workspace free from ongoing interruptions to safeguard member PHI/HIPAA information.

🏝️ Benefits

• Bonus incentive plan based on individual and/or company performance.

• Medical benefits.

• Dental benefits.

• Vision benefits.

• 401(k) retirement savings plan.

• Paid time off.

• Company holidays.

• Personal holidays.

• Paid parental leave.

• Paid caregiver leave.

• Short-term disability.

• Long-term disability.

• Life insurance.

• Personal wellness support.

• Smart healthcare decision support.

• Remote work arrangement.

• Potential for occasional travel to Humana offices for training or meetings.