Security Engineer

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• Collaborate with the Third‑Party Risk Management team and the business to evaluate new applications and services, assess security controls, and ensure alignment with enterprise security requirements.
• Collaborate with IT teams to enforce security standards that enable secure technology solutions.
• Provide security guidance with a holistic view of how security configuration changes impact Security Operations , GRC compliance requirements, and Security Engineering workflows and tooling.
• Evaluate proposed application and platform configuration changes from business and Security Engineering teams, analyze their impact on the security posture and architectural standards , and make recommendations.
• Support cross-functional adoption of security controls for IaaS/PaaS/SaaS, including reference architectures and guardrails.
• Deliver security guidance related to creating and deploying network security controls such as firewall access control lists (ACLs).
• Assess changes in the external threat landscape using threat intelligence and collaborate with technology teams to guide the implementation of appropriate defensive controls.
• Teach, lead, and influence IT and security teams to incorporate security into enterprise and client-facing projects and applications.
• Assist in developing enterprise security standards aligned to industry frameworks (e.g. CIS Critical Security Controls), and partner with the business to ensure controls are clearly understood and effectively applied across technologies and use cases.
• Partner with the Cyber Security Product team to evaluate security tools to ensure they meet business needs, security requirements, and architectural standards. This includes assessing integration with existing systems and presenting clear, actionable recommendations to stakeholders.
• Use workflow automation platforms to streamline processes, reduce manual effort, and improve operational efficiency.

Senior Architect – Cyber Security

• works with EIP Department leaders and Humana enterprise stakeholders to identify, define, and develop security architecture requirements and secure designs for AI technology solutions across Humana's business, information technology, and security domains
• leads the development of technical architecture & designs, develop security requirements, perform threat modeling and ensures alignment of security & risk imperatives with business priorities
• responsible for the high-level design and patterns of security program infrastructures to enable the protection of Humana tools, data, systems, and networks
• drives alignment between the EIP security strategy, security architecture and infrastructure, and Humana's overall business and technology strategic priorities
• responsible for planning, designing, and proposing architectural patterns or security enhancements for Humana's information security and technology infrastructures
• engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge
• actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats
• performs and oversees efforts to conduct threat modeling, risk analyses and security assessments of relevant enterprise / EIP infrastructure
• develops and manages security requirements for GenAI, model, MCP, Agentic AI solutions and software integration with Humana systems
• ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture (i.e., reference models, segment and solution architectures)
• focuses on AI security threats, designs, and secure implementation of AI processes and solutions (applications and software)
• identifies opportunities to facilitate process and tooling automation, and where possible, within existing security architecture patterns
• may participate in the research, evaluation, and implementation of AI testing tools, frameworks, and utilities for Humana's enterprise and EIP Departments

Senior AI Security Architect

• Coordinate the creation of compliance controls during the onboarding of applications to access management
• As Compliance Manager, coordinates, creates and updates control procedure narratives in support of our required regulatory and compliance frameworks
• Coordinate quarterly control self-assessments
• Coordinate with teams to ensure application-specific control issues are identified, tracked, and addressed appropriately
• Partner with cross-functional teams to support compliance objectives, issue resolution, and process improvement efforts
• Lead and manage the special projects as needed, including communicating with stakeholders and validate project completion

Senior Technology, CyberSecurity Compliance Professional

• Define, develop, and continually advance EIP's long-term cybersecurity strategy, ensuring alignment with corporate goals and evolving risk landscapes.
• Develop and present executive and board-level materials, articulating cybersecurity vision, strategic priorities, maturity metrics, and progress against objectives.
• Leverage deep experience in healthcare and/or financial services to inform strategy and ensure compliance with sector-specific regulatory frameworks (e.g., HIPAA, PCI DSS, SOX).
• Lead the strategic integration of AI into cybersecurity operations, ensuring secure adoption, risk mitigation, and compliance.
• Architect and execute initiatives to advance cybersecurity program maturity, talent development, and operational excellence.
• Direct the allocation of resources and investment in cybersecurity capabilities, controls, and technologies based on risk, business value, and strategic impact.
• Drive a security-centric culture through enterprise change management strategies, maximizing adoption of strategic priorities and minimizing resistance across a matrixed organization.
• Provide consultative expertise to EIP department leaders, project teams, and cross-functional partners to ensure strategic alignment and integration of cybersecurity priorities at every stage of project and program lifecycles.

Principal Cybersecurity Strategist

• Partner with the Product Security leadership to ready requests from numerous sources into a prioritized, deliverable backlog for the team
• Communicate the priorities and execution status effectively to key stakeholders
• Incorporate stakeholder input into backlog while effectively negotiating tradeoffs of conflicting priorities based on value to the business and customer
• Collaborate with the Product Security Director, Associate Directors, stakeholders, other Product Security and dependent teams to align on priorities, set commitments and prioritize the backlog
• Drive quality and innovation into the team's work product
• Define key metrics for relevant reporting on status
• Own messaging of status and health of the team's delivery ensuring that the work meets the customers' needs
• Facilitate activities and sessions such as Backlog Refinement
• Follow established guidelines/procedures.

Product Owner – Cybersecurity

• Administer, configure, and maintain HashiCorp Vault for secure secrets management across Azure and Google Cloud Platform (GCP) environments.
• Integrate Vault with enterprise cloud workloads, ensuring robust access control and compliance with Humana's security standards.
• Develop and implement automation scripts and tools to support infrastructure management and operational efficiency, using PowerShell, Python, Ruby, or Bash.
• Support installation, configuration, and maintenance of cloud-based servers and services, ensuring reliability and scalability in multi-cloud settings.
• Collaborate with cross-functional teams to design and enhance secure cloud architectures, contributing to continuous improvement initiatives.
• Monitor, identify, and remediate cybersecurity issues and opportunities, in alignment with Humana's IT/Cyber IOP policies.
• Ensure accurate documentation and compliance for technology lifecycle management, including decommission requests as required.
• Provide regular updates, evidence of remediation, and participate in closure reviews of IT/Cyber IOPs.

Senior CyberSecurity Engineer, Hashicorp Vault

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Protecting IT systems, networks, and applications
• Designing, implementing, and testing security solutions
• Leading response to security incidents and breaches
• Evaluating and managing security tools and technologies
• Providing security training and awareness programs for employees

• Provide technical input into the design, deployment and operation of global IT Security management software and hardware devices.
• Perform security tool system administration, including applying updates and patches.
• Review existing applications periodically as well as new applications prior to installation to ensure adherence to security policies and industry best practices.
• Proactively engage in discussions with IT operational teams to maintain and improve security posture.
• Work to resolve security issues or incidents.
• Perform applicable testing and investigations related to Information Security, Identify Access Management or Threat and Vulnerability Management.
• Develop, revise and maintain relevant Standard Operating Procedures and Working Instructions related to IT Security and engineering with a focus on ongoing improvement.

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Coordinate daily security operations including access control systems, visitor management protocols, security personnel scheduling, and incident logging in collaboration with law enforcement when necessary
• Track and report environmental performance metrics such as energy consumption, water usage, waste diversion rates, and carbon emissions while maintaining sustainability dashboards for stakeholders
• Manage waste hauler and recycling vendor relationships to optimize service delivery, track diversion performance against targets, and design waste stream signage and bin infrastructure
• Facilitate employee engagement programs that promote security awareness, sustainable behaviors, and environmental education across the organization
• Support leadership in vendor management activities including security and sustainability contract compliance monitoring and specialty waste program coordination
• Create presentations and communication materials for internal audiences while coordinating information flow among security, facilities, sustainability, and business operations teams
• Assist in facility planning processes to integrate security and sustainability considerations while tracking employee safety training and environmental awareness program completion.

Security & Sustainability Program Coordinator

• Drive the generation services and technologies business to meet or exceed quarterly and annual quota objectives in partnership with the account and domain teams.
• Maintain advanced knowledge of the client’s security environment, business operations, security needs, and risk appetite.
• Identify their security concerns and how they correlate to Optiv’s strategic solutions across the assigned domain and holistic cybersecurity programs.
• Identify cross-sell and upsell opportunities across clients and Optiv's partner relationships.
• Qualify leads and partner with internal colleagues to determine scope, proposal management, and follow through to closure.
• Participate in sales opportunities across Optiv's entire portfolio.
• Clearly articulate how the necessary elements of the Optiv technology and services portfolio meet the specific needs of the client stakeholders at a senior leadership level.
• Stay abreast of industry trends, news, and maintain a broad understanding of the security landscape to facilitate thought leadership, support, analysis, and guidance to clients and internal Optiv groups.
• Collaborate with service delivery to ensure the team has necessary supporting Endpoint Solutions domain specialty materials that present a consistent and comprehensive approach.
• Effectively work with multiple client personas across the security leadership team, as well as other relevant personas to develop security strategy and define roadmaps to execute on security strategy aligned business goals, budgetary spend, and metrics based on return of investment.
• Actively participate in the Field Center of Excellence and position Optiv Endpoint services and our key technology partners and their products to deliver value to clients.
• Maintain advisory relationships with key stakeholders at clients by facilitating thought leadership, support, information, and guidance in conjunction with sales partners.
• Identify and position Endpoint Solutions and Optiv’s services as part of the solution architecture to drive complete security programs and meet client objectives across technology and services including: driving new discussions by leveraging peer and industry network contacts; performing requirements gathering analysis, and technology selection criteria; coordinating demonstrations and security technology evaluations; acting as the subject matter expert (SME) for Endpoint Solutions.
• Interface and partner with internal Optiv teams, particularly service delivery liaisons, to align client expectations with the entire Optiv solution portfolio to ensure service delivery excellence and client satisfaction.
• Identify new and emerging technologies in the Endpoint Solutions space.
• Promotes Optiv’s portfolio and security awareness at speaking events, partner events, and by leveraging social media.
• Builds a reputation as a trusted advisor with clients, partners, peers, and cyber community, resulting in an influential network of contacts.
• Listen for client feedback and continually share with internal teams to evaluate and cultivate continuous improvement.
• Participate in account planning, forecasting, and pipeline management activities.
• Participate in managing and prioritizing the proposal process to create business proposals, contracts, and respond to RFI/RFP’s.
• Actively pursue personal development by maintaining and obtaining technical capabilities, soft skills, and security-specific knowledge through formal education, certification, and other avenues.
• Advance sales techniques: makes connections, facilitates meetings, reads the room, asks probing questions, overcomes objections, gains trust, maintains composure under pressure, positions solutions, and assists in finalization of sale.

Senior Cybersecurity Advisor – Endpoint

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• Write scalable code and perform intelligence analysis in order to identify threats
• Identify trends with current/emerging threats as they relate to the use of information technology and policies.
• Research credible new intelligence and subject matter resources to combat them
• Utilize and enhance existing REST APIs and implement new REST APIs using best practices for a scalable user interface
• Set the standards for development/coding
• Provide subject matter expertise to support various operations
• Leverage AI-assisted research, development, and automation tools to accelerate malware analysis, threat detection, reverse engineering, secure coding practices, and operational efficiency across cybersecurity initiatives.

Cybersecurity Research Engineer

• Write scalable code and perform intelligence analysis in order to identify threats
• Identify trends with current/emerging threats as they relate to the use of information technology and policies
• Research credible new intelligence and subject matter resources to combat them
• Utilize and enhance existing REST APIs and implement new REST APIs using best practices for a scalable user interface
• Set the standards for development/coding
• Provide subject matter expertise to support various operations
• Leverage AI-assisted research, development, and automation tools to accelerate malware analysis, threat detection, reverse engineering, secure coding practices, and operational efficiency across cybersecurity initiatives

• Implement, configure, upgrade, document, and troubleshoot security platforms, including: Microsoft Sentinel (SIEM/SOAR), Microsoft Defender (XDR/DLP), Microsoft Purview, Entra ID, and Microsoft 365 Security, Tenable (including Cloud TVM), Tanium, Delinea (PAM), GitHub Security, Google Security Command Center (SCC), and Palo Alto Firewalls.
• Lead enterprise-wide logging implementation and SIEM data onboarding.
• Implement vulnerability and cloud TVM solutions and integrate with asset/CMDB data.
• Develop cyber security health monitoring and detection quality improvements.
• Perform firewall rule reviews, cleanup, and tightening.
• Act as L3 SOC support for advanced investigations and incident response.
• Partner with IT and infrastructure teams; participate in change control processes.
• Apply AI-assisted approaches to investigation and security operations.
• Participate in a rotating L3 off-hours on-call schedule.

Manager, IT Security Engineering

• Design and deliver innovative training programs shaping the cybersecurity culture at Humana
• Collaborate with leaders and subject matter experts to develop education ensuring workforce is equipped to navigate cyber risks
• Drive curriculum development for new products/tools and create technical resources
• Champion cyber awareness across all levels of the organization and reduce risk through human-focused, data-driven initiatives
• Work with stakeholders to develop, plan, coordinate, and evaluate cybersecurity training/education courses, methods, and techniques
• Produce technical documentation, presentations, and documents reinforcing cybersecurity knowledge across Humana
• Conduct learning needs assessments and identify requirements and plans instructional opportunities
• Support training of new tools and applications for cyber-awareness and proper usage.

Lead, CyberSecurity Advocacy

• Provide leadership for engineering and operations teams responsible for enterprise load balancing, traffic management and gateway services, and edge integrations
• Own the strategy, roadmap, and operational performance of Secure Edge platforms enabling resilient, hardened connectivity
• Ensure high availability, performance, and resiliency of services governing enterprise traffic and user access across on-premises and cloud environments
• Drive modernization initiatives, including on-premises standardization, optimization of cloud-delivered global traffic services, and integration of native cloud gateways
• Establish and maintain consistent policies, standards, and architectural patterns across corporate and subsidiary environments
• Oversee operational metrics, service health monitoring, incident response, and continuous improvement efforts
• Manage budgets and resource allocation across associates, contractors, and supporting services
• Develop and mentor senior technical leaders while building and sustaining high-performing engineering teams

Associate Director, Edge Security – Traffic Management

• Lead global IT security operations, including SOC monitoring, incident response, vulnerability management, and compliance
• Drive security strategy across hybrid and multi ‑ cloud environments and ensure IT Security functions and external partners align to organizational priorities
• Build and mature the organization’s security culture, awareness programs, and adherence to security standards across applications and infrastructure
• Oversee IT GRC, security governance, policy development, and regulatory reporting
• Identify and address emerging security risks, ensuring proactive mitigation and continuous improvement
• Guide secure design practices, threat modeling, and security integration throughout the software development lifecycle
• Direct penetration testing, vendor risk management, and expert technical support during incidents
• Collaborate with IT Operations to enhance operating models and improve global security posture
• Lead global security architecture reviews and drive changes to strengthen security controls
• Own business continuity strategy, including planning, auditing, and tracking key resilience KPIs (e.g., MTTR, RTO, RPO)
• Ensure incident response/ continuity plans and SLAs are reviewed annually and aligned with IT leaders and executive leadership expectations

See all jobs on JobTailor

Senior Cybersecurity Engineer

Senior Architect – Cyber Security

Senior AI Security Architect

Senior Technology, CyberSecurity Compliance Professional

Principal Cybersecurity Strategist

Product Owner – Cybersecurity

Senior CyberSecurity Engineer, Hashicorp Vault

Security Control Assessor

Security Engineer

Security Engineer

WAF/CDN Security Architect

Security & Sustainability Program Coordinator

Senior Cybersecurity Advisor – Endpoint

Security Engineer

Cybersecurity Research Engineer

Cybersecurity Research Engineer

Manager, IT Security Engineering

Lead, CyberSecurity Advocacy

Associate Director, Edge Security – Traffic Management

Global Senior IT Security Specialist