Security Engineer

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Provide on-site support to the manufacturing team, assisting with security and fire operations for the plant, including staffing requirements, access control, CCTV monitoring, fire inspections, and emergency support.
• Identify and escalate physical security gaps through proactive security initiatives.
• Assist with investigations, escalating to the Supervisor and/or Regional Security Manager and Global Investigations, as appropriate.
• Assist in overseeing day-to-day security operations, including contract security personnel. Identify and escalate performance issues.
• Assist with special projects and security initiatives, including GAO audits, AON fire inspection audits, daily plant walks, etc.
• Enforce Security and Fire manual, bulletins, and protocols to ensure compliance.
• Collaborate with appropriate internal Ford skill teams and external work partners to plan for and provide security coverage for special events, as directed.
• Monitor and analyze trends related to property loss or theft of high-value components/intellectual property, implementing countermeasures as needed.
• May perform the role of Incident Commander for emergencies.
• Respond to emergency incidents, including medical, behavioral, fire, trespassing, accidents, suspicious activity, thefts, etc. Escalate appropriately to the Supervisor and/or Regional Security Manager.
• Collaborate with People Matters, Human Resources, Labor Relations, and Safety representatives as necessary to discuss and resolve workplace issues.
• Develop and maintain strong relationships with internal skill teams to ensure unified alignment with all security and fire-related matters.
• Ensure compliance with the MCRP for security and fire-related requirements.
• Ensure monthly fire tasks are completed and documented by contract security personnel.
• Enhance emergency response capabilities by utilizing incident response tools and through the deployment of emergency response equipment for the company or local municipalities.
• Protect company classified information with confidentiality.
• Assist in security for VIP visits.

Security Specialist

• Patrol and inspect property to protect against fire, theft, vandalism, and illegal activity
• Monitor entrances and exits through use of security camera system of hotel
• Greet and assist guests, visitors, and vendors as needed
• Lock and unlock doors including manual overhead doors as required
• Observe and report violations of hotel policy and law on the property and deter criminal activity or other problems through visual presence and intervention
• Complete incident reports with accurate information and in a timely fashion
• Perform key audits as requested by General Manager, Human Resources and Rooms Manager
• Perform fire safety inspections and coordinate response to emergency situations
• Enter dead bolted or secured rooms when necessary
• Perform investigation of claims of loss, incidents, or injury/illness and track and report on their trends for the premise
• Maintain confidentiality as required for performing job responsibilities that require discretion
• All other duties as assigned

Security Officer

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Participate in CMMC Level 1 and CMMC Level 2 assessments.
• Understand the security practices of Level 1 and 2 assessments.
• Gather evidence for assessments and provide "met/not met" inputs to the lead assessor for consideration.
• Applied experience in assessing and analyzing cyber security documentation for client information systems.
• Operational knowledge in identifying and mitigating cyber security risks through formal assessment activities.
• Functional understanding of various standards to include NIST SP 800-171/171A Rev 2 and NIST SP 800-53/53A Rev 5 and how compliance with various standards and frameworks is achieved.
• Functional understanding of 32 CFR Part 170 requirements and associated CMMC guidance (e.g., CMMC Assessment Process v2.0).
• Familiarity with identifying and applying vulnerability remediations, fix procedures, and (when necessary) mitigation techniques.
• Ability to participate in compliance-related and technical discussions to include applicable compliance frameworks, architectures, and security control requirements (technical and non-technical).
• Basic knowledge of the following: External Service Providers, Cloud Computing/Cloud Service Providers, and FedRAMP.
• Self-motivated and able to work in an independent manner or as part of a client delivery team.
• Able to author original content/reports/attestations.
• Exceptional organizational, planning, and attention to detail skills.
• Assist with administrating the standalone CMMC 3PAO environment.
• Ability to perform other assessments such as NIST CSF, NIST 800-171, or other compliance based assessments.
• Able to work in a fast-paced, deadline-driven, remote environment.
• Able to travel at least 25% as required for various client engagements.

Cybersecurity CMMC Assessor

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Perform engineering of data protection products. For example, Privacera.
• Understand and perform deployments on Azure and GCP Clouds
• Create CI/CD pipelines on Azure environment
• Perform risk assessments, follow and enhance the security solutions lifecycle (evaluation, purchase, build, technical policy configuration, integration into Cloud environments, and run)
• Contribute to Data Protection security solutions R&D to evaluate the latest cutting edge tools against unfilled strategic security capabilities to drive business priorities
• Act as a subject matter expert on the implementation and capabilities of existing security controls with a focus on Privacera
• Identifies the need for new security technology solutions; designs, reviews and collaborates on the deployment of new solutions
• Stays continually informed about the latest developments in the security field, including mitigation strategies, threats, tools, attack vectors, and cutting edge preventative measures
• Participates in new products or technology solutions supported by appropriate ROI, total cost of ownership, and/or cost benefit analyses
• Performs technical proof of concepts

Senior Cybersecurity Engineer

• Provides forensics technical expertise and investigations support to EIP CyberSecurity defense stakeholders
• Assists with incident response, remediation, and root-cause identification
• Actively assesses and correlates incident data to enable vulnerability identification
• Provides forensics analysis recommendations for remediation activities
• Manages a real-time forensic capability that collects, assesses, and analyzes data correlations
• Facilitates the creation of reports for EIP leadership consumption that provide in-depth investigative analysis into possible root causes of high-profile incidents within Humana infrastructures and assets
• Begins to influence department's strategy
• Makes decisions on moderately complex to complex issues regarding technical approach for project components
• Work is performed without direction, exercises considerable latitude in determining objectives and approaches to assignments

Senior Digital Forensics and Incident Response Engineer

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

• Collaborate with the Third‑Party Risk Management team and the business to evaluate new applications and services, assess security controls, and ensure alignment with enterprise security requirements.
• Collaborate with IT teams to enforce security standards that enable secure technology solutions.
• Provide security guidance with a holistic view of how security configuration changes impact Security Operations , GRC compliance requirements, and Security Engineering workflows and tooling.
• Evaluate proposed application and platform configuration changes from business and Security Engineering teams, analyze their impact on the security posture and architectural standards , and make recommendations.
• Support cross-functional adoption of security controls for IaaS/PaaS/SaaS, including reference architectures and guardrails.
• Deliver security guidance related to creating and deploying network security controls such as firewall access control lists (ACLs).
• Assess changes in the external threat landscape using threat intelligence and collaborate with technology teams to guide the implementation of appropriate defensive controls.
• Teach, lead, and influence IT and security teams to incorporate security into enterprise and client-facing projects and applications.
• Assist in developing enterprise security standards aligned to industry frameworks (e.g. CIS Critical Security Controls), and partner with the business to ensure controls are clearly understood and effectively applied across technologies and use cases.
• Partner with the Cyber Security Product team to evaluate security tools to ensure they meet business needs, security requirements, and architectural standards. This includes assessing integration with existing systems and presenting clear, actionable recommendations to stakeholders.
• Use workflow automation platforms to streamline processes, reduce manual effort, and improve operational efficiency.

Senior Architect – Cyber Security

• works with EIP Department leaders and Humana enterprise stakeholders to identify, define, and develop security architecture requirements and secure designs for AI technology solutions across Humana's business, information technology, and security domains
• leads the development of technical architecture & designs, develop security requirements, perform threat modeling and ensures alignment of security & risk imperatives with business priorities
• responsible for the high-level design and patterns of security program infrastructures to enable the protection of Humana tools, data, systems, and networks
• drives alignment between the EIP security strategy, security architecture and infrastructure, and Humana's overall business and technology strategic priorities
• responsible for planning, designing, and proposing architectural patterns or security enhancements for Humana's information security and technology infrastructures
• engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge
• actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats
• performs and oversees efforts to conduct threat modeling, risk analyses and security assessments of relevant enterprise / EIP infrastructure
• develops and manages security requirements for GenAI, model, MCP, Agentic AI solutions and software integration with Humana systems
• ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture (i.e., reference models, segment and solution architectures)
• focuses on AI security threats, designs, and secure implementation of AI processes and solutions (applications and software)
• identifies opportunities to facilitate process and tooling automation, and where possible, within existing security architecture patterns
• may participate in the research, evaluation, and implementation of AI testing tools, frameworks, and utilities for Humana's enterprise and EIP Departments

Senior AI Security Architect

• Coordinate the creation of compliance controls during the onboarding of applications to access management
• As Compliance Manager, coordinates, creates and updates control procedure narratives in support of our required regulatory and compliance frameworks
• Coordinate quarterly control self-assessments
• Coordinate with teams to ensure application-specific control issues are identified, tracked, and addressed appropriately
• Partner with cross-functional teams to support compliance objectives, issue resolution, and process improvement efforts
• Lead and manage the special projects as needed, including communicating with stakeholders and validate project completion

Senior Technology, CyberSecurity Compliance Professional

• Define, develop, and continually advance EIP's long-term cybersecurity strategy, ensuring alignment with corporate goals and evolving risk landscapes.
• Develop and present executive and board-level materials, articulating cybersecurity vision, strategic priorities, maturity metrics, and progress against objectives.
• Leverage deep experience in healthcare and/or financial services to inform strategy and ensure compliance with sector-specific regulatory frameworks (e.g., HIPAA, PCI DSS, SOX).
• Lead the strategic integration of AI into cybersecurity operations, ensuring secure adoption, risk mitigation, and compliance.
• Architect and execute initiatives to advance cybersecurity program maturity, talent development, and operational excellence.
• Direct the allocation of resources and investment in cybersecurity capabilities, controls, and technologies based on risk, business value, and strategic impact.
• Drive a security-centric culture through enterprise change management strategies, maximizing adoption of strategic priorities and minimizing resistance across a matrixed organization.
• Provide consultative expertise to EIP department leaders, project teams, and cross-functional partners to ensure strategic alignment and integration of cybersecurity priorities at every stage of project and program lifecycles.

Principal Cybersecurity Strategist

• Partner with the Product Security leadership to ready requests from numerous sources into a prioritized, deliverable backlog for the team
• Communicate the priorities and execution status effectively to key stakeholders
• Incorporate stakeholder input into backlog while effectively negotiating tradeoffs of conflicting priorities based on value to the business and customer
• Collaborate with the Product Security Director, Associate Directors, stakeholders, other Product Security and dependent teams to align on priorities, set commitments and prioritize the backlog
• Drive quality and innovation into the team's work product
• Define key metrics for relevant reporting on status
• Own messaging of status and health of the team's delivery ensuring that the work meets the customers' needs
• Facilitate activities and sessions such as Backlog Refinement
• Follow established guidelines/procedures.

Product Owner – Cybersecurity

• Administer, configure, and maintain HashiCorp Vault for secure secrets management across Azure and Google Cloud Platform (GCP) environments.
• Integrate Vault with enterprise cloud workloads, ensuring robust access control and compliance with Humana's security standards.
• Develop and implement automation scripts and tools to support infrastructure management and operational efficiency, using PowerShell, Python, Ruby, or Bash.
• Support installation, configuration, and maintenance of cloud-based servers and services, ensuring reliability and scalability in multi-cloud settings.
• Collaborate with cross-functional teams to design and enhance secure cloud architectures, contributing to continuous improvement initiatives.
• Monitor, identify, and remediate cybersecurity issues and opportunities, in alignment with Humana's IT/Cyber IOP policies.
• Ensure accurate documentation and compliance for technology lifecycle management, including decommission requests as required.
• Provide regular updates, evidence of remediation, and participate in closure reviews of IT/Cyber IOPs.

Security Engineer jobs in Kentucky

See all jobs on JobTailor

Workday Security Developer

Cybersecurity Engineer II

Security Specialist

Security Officer

Cybersecurity Engineer III

Cybersecurity CMMC Assessor

Application Security Consultant

Senior Cybersecurity Engineer

Senior Digital Forensics and Incident Response Engineer

Senior Cybersecurity Engineer

Senior Architect – Cyber Security

Senior AI Security Architect

Senior Technology, CyberSecurity Compliance Professional

Principal Cybersecurity Strategist

Product Owner – Cybersecurity

Senior CyberSecurity Engineer, Hashicorp Vault