Security Engineer

• Establish and communicate a clear vision, mission, and multiyear roadmap for OT and embedded systems cybersecurity engineering and assurance programs.
• Lead and inspire teams of industry professionals, fostering a culture that is energetic, collaborative, resilient, and outcome driven.
• Serve as a change leader, guiding teams and stakeholders through evolving security, regulatory, and business landscapes.
• Build, deploy, and continuously improve enterprise scale OT security controls and assurance programs across industrial manufacturing facilities.
• Oversee security risk assessments, architecture design reviews, control testing, and assurance activities for factories and connected products.
• Leverage AI driven and automated capabilities to perform security control assessments, enhance visibility, and significantly accelerate assurance activities.
• Build trusted partnerships with internal business, engineering, product, and operations leaders.
• Ensure alignment with and application of relevant industry standards and frameworks, including NIST Cybersecurity Framework (CSF) and others.

Senior Manager, Cybersecurity Engineering – Factory & Product Assurance

• Lead the SIEM team with functional responsibility for end-to-end, scalable ingestion, enrichment, correlation, search performance, and detection content that increases enterprise visibility and response readiness.
• Lead the advanced analytics team across detection engineering, anomaly detection, and AI/ML-assisted analytics to improve prioritization, surface earlier risk signals, and automate manual work.
• Own the roadmap for SIEM, analytics, and log data platforms, with clear accountability for availability, ingest health, data quality, and detection effectiveness.
• Ensure alignment with security policies, controls, and regulatory requirements; partner with GRC and audit to maintain audit readiness, evidence collection, and remediation plans.
• Build, coach, and inspire a high-performing multidisciplinary team with clear expectations, strong operating rhythms, and a culture of ownership and continuous improvement.
• Hire, onboard, and manage performance for the team (goals, coaching, feedback, and development plans).
• Plan team capacity and on-call coverage, and establish runbooks, incident/problem management rhythms, and service reporting.
• Develop business cases and manage budgets for owned products and services, tracking KPIs that connect investment to risk reduction and service outcomes.
• Lead vendor relationships and platform partnerships to maximize service quality, support internal SLA expectations, and keep the team aligned to emerging threats, tools, and industry best practices.
• Lead the team in continuous innovation and process efficiencies.
• Equip incident responders with high-fidelity telemetry and analytics and continuously raise the bar on data quality and detection performance.

Cybersecurity Manager – SIEM, Detection & Security Analytics

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• works with EIP Department leaders and Humana enterprise stakeholders to identify, define, and develop security architecture requirements and secure designs for AI technology solutions across Humana's business, information technology, and security domains
• leads the development of technical architecture & designs, develop security requirements, perform threat modeling and ensures alignment of security & risk imperatives with business priorities
• responsible for the high-level design and patterns of security program infrastructures to enable the protection of Humana tools, data, systems, and networks
• drives alignment between the EIP security strategy, security architecture and infrastructure, and Humana's overall business and technology strategic priorities
• responsible for planning, designing, and proposing architectural patterns or security enhancements for Humana's information security and technology infrastructures
• engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge
• actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats
• performs and oversees efforts to conduct threat modeling, risk analyses and security assessments of relevant enterprise / EIP infrastructure
• develops and manages security requirements for GenAI, model, MCP, Agentic AI solutions and software integration with Humana systems
• ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture (i.e., reference models, segment and solution architectures)
• focuses on AI security threats, designs, and secure implementation of AI processes and solutions (applications and software)
• identifies opportunities to facilitate process and tooling automation, and where possible, within existing security architecture patterns
• may participate in the research, evaluation, and implementation of AI testing tools, frameworks, and utilities for Humana's enterprise and EIP Departments

Senior AI Security Architect

• Coordinate the creation of compliance controls during the onboarding of applications to access management
• As Compliance Manager, coordinates, creates and updates control procedure narratives in support of our required regulatory and compliance frameworks
• Coordinate quarterly control self-assessments
• Coordinate with teams to ensure application-specific control issues are identified, tracked, and addressed appropriately
• Partner with cross-functional teams to support compliance objectives, issue resolution, and process improvement efforts
• Lead and manage the special projects as needed, including communicating with stakeholders and validate project completion

Senior Technology, CyberSecurity Compliance Professional

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Engineers, implements and monitors security measures for the protection of computer systems, networks and information.
• Identifies and defines system security requirements.
• Designs computer security architecture and develops detailed cyber security designs.
• Prepares and documents standard operating procedures and protocols.
• Configures and troubleshoots security infrastructure devices.
• Develops technical solutions and new security tools to assist in mitigating security vulnerabilities and automating repeatable tasks.
• Leads IT groups and business units as necessary in troubleshooting compatibility issues between security tools and business or productivity programs.
• Performs analysis of suspected malicious code and other software or programs and provides written or verbal analysis to management.
• Analyzes client and customer needs as required and provides clear and concise reports to leadership.
• Works closely with management on assigned projects from inception through implementation ensuring adequate internal communication and user involvement is maintained.
• Configuration and management of endpoint detection and response (EDR) policies.
• Integration with Microsoft 365 Defender and Microsoft Entra ID for threat analytics and identity protection.
• Monitoring and responding to security alerts, incidents, and automated investigations.
• Implementation of attack surface reduction rules, antivirus policies, and device control settings.
• Deployment and management of Application Allowlisting, Ringfencing™, and Storage Control policies.
• Configuration of Elevation Control and Network Access Control to enforce Zero Trust principles.
• Analysis of policy violations and threat events to continuously improve endpoint security posture.
• Collaboration with IT and security teams to align ThreatLocker policies with organizational risk tolerance and compliance requirements.
• Strong understanding of Zero Trust architecture, endpoint hardening, and real-time threat mitigation strategies.

Senior IT Security Engineering Advisor

• Producing clear and concise communications that summarize incident response.
• Partner closely with CSIRT to ensure incident data is accurately captured and high-quality documentation is maintained.
• Produce incident reports for a wide group of technical and non-technical audiences such as legal, executive, board level and employees.
• Create and nurture relationships across the incident response, infrastructure, application, and legal teams.
• Develop and manage weekly and quarterly reports detailing the critical efforts of the CSIRT.
• Support the CSIRT Readiness team in developing, delivering and documenting incident response tabletop exercises.

Cybersecurity Technical Communicator

• Develop and execute an enterprise-wide technology strategy that supports organizational growth, operational efficiency, and long-term scalability.
• Provide executive guidance on technology investments, modernization priorities, and digital transformation initiatives.
• Establish enterprise standards for system architecture, resilience, performance, and service continuity.
• Ensure technology programs are aligned with business needs, compliance obligations, and strategic objectives.
• Lead technology integrations for new lines of business as they are added.
• Identify data security, identity consolidation and systems rationale across multiple environments.
• Lead enterprise system implementations, including CRM, ERP/finance, CLM, member platforms, and program management systems.
• Direct system design, configuration, workflow mapping, and cross-functional adoption.
• Oversee integration strategy using APIs, middleware, automation frameworks, and MDM principles to maintain a single source of truth.
• Govern change management, system sustainability, documentation, and operational performance across all major platforms.
• Build and maintain secure and scalable data environments, including an enterprise data lake, data warehouses, and reporting ecosystems.
• Define and enforce data governance standards covering taxonomy, metadata, lineage, retention, and quality.
• Ensure data architecture supports analytics, forecasting, reporting, and emerging AI-enabled capabilities.
• Strengthen data visibility, consistency, and reliability across business functions.
• Lead the company’s cybersecurity program, including policy development, identity and access controls, vulnerability management, and continuous monitoring.
• Ensure compliance with federal frameworks, including NIST 800-171, CUI handling, DFARS requirements, CMMC readiness, and FedRAMP-aligned controls.
• Develop systems and processes to manage Classified Data as required.
• Own technology and cybersecurity risk management in alignment with federal and contractual requirements.
• Oversee incident response, audit preparation, third-party security evaluations, and remediation planning.
• Serve as the primary liaison with auditors, compliance consultants, and government technology representatives.
• Lead all IT operations, including service delivery, helpdesk support, cloud environments, on-premise infrastructure, network administration, and device management.
• Implement ITIL-aligned processes for change control, ticket management, escalation, and operational workflow management.
• Ensure reliable uptime, strong SLAs, and frictionless employee access to technology services.
• Maintain business continuity, disaster recovery readiness, and long-term infrastructure modernization plans.
• Manage relationships with technology vendors, SaaS providers, MSPs, and system integrators.
• Oversee contract evaluation, renewal strategy, licensing optimization, and cost management.
• Establish a framework for build-versus-buy decisions and long-term platform lifecycle management.
• Ensure vendor solutions meet performance, compliance, and security requirements.
• Assess talent and identify gaps, Build, mentor, and lead high-performing teams across IT operations, security, data architecture, systems administration, and enterprise applications.
• Promote a culture of accountability, transparency, documentation, and continuous improvement.
• Strengthen cross-functional engagement and drive organization-wide adoption of technology and security practices.
• Provide coaching, development, and clear expectations to ensure operational excellence and professional growth.

Vice President – Technology and Security

• Partner with the Product Security leadership to ready requests from numerous sources into a prioritized, deliverable backlog for the team
• Communicate the priorities and execution status effectively to key stakeholders
• Incorporate stakeholder input into backlog while effectively negotiating tradeoffs of conflicting priorities based on value to the business and customer
• Collaborate with the Product Security Director, Associate Directors, stakeholders, other Product Security and dependent teams to align on priorities, set commitments and prioritize the backlog
• Drive quality and innovation into the team's work product
• Define key metrics for relevant reporting on status
• Own messaging of status and health of the team's delivery ensuring that the work meets the customers' needs
• Facilitate activities and sessions such as Backlog Refinement
• Follow established guidelines/procedures.

Product Owner – Cybersecurity

• Administer, configure, and maintain HashiCorp Vault for secure secrets management across Azure and Google Cloud Platform (GCP) environments.
• Integrate Vault with enterprise cloud workloads, ensuring robust access control and compliance with Humana's security standards.
• Develop and implement automation scripts and tools to support infrastructure management and operational efficiency, using PowerShell, Python, Ruby, or Bash.
• Support installation, configuration, and maintenance of cloud-based servers and services, ensuring reliability and scalability in multi-cloud settings.
• Collaborate with cross-functional teams to design and enhance secure cloud architectures, contributing to continuous improvement initiatives.
• Monitor, identify, and remediate cybersecurity issues and opportunities, in alignment with Humana's IT/Cyber IOP policies.
• Ensure accurate documentation and compliance for technology lifecycle management, including decommission requests as required.
• Provide regular updates, evidence of remediation, and participate in closure reviews of IT/Cyber IOPs.

Senior CyberSecurity Engineer, Hashicorp Vault

• Research and analyze emerging technologies and design and build architectures and solutions to enable secure implementation of new technologies.
• Administers security infrastructure.
• Conducts active threat detection and analysis, creates threat intelligence, and maintains threat profiles.
• Assists in the development and implementation of security policies, procedures, and protective measures.
• Performs vulnerability assessments, security testing, and works with operations and development teams on remediation and mitigation of findings.
• Educates users about security policies and consults on security issues.

Senior IT Security Engineer

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Leads the creation or evolution of the EA/SA function, including the coordination of an appropriately balanced pursuit of enterprise information systems, data, technical, and solution architecture viewpoints
• Partners with TODD and business leaders to understand, support, and advance the enterprise's business and technology strategies
• Leads the identification and analysis of enterprise business drivers to derive enterprise business, information, technical, and solution architecture requirements
• Analyzes industry, technology, and market trends to determine their potential impacts on the enterprise
• Analyzes the current business and technology environment to detect critical deficiencies and recommends solutions for improvement
• Leads the development of an implementation plan for EA/SA based on business requirements and technology strategies
• Oversees EA/SA implementation, ongoing refinement activities, and the documentation of all design and analysis work
• Consults with program/project teams to fit solutions to architecture across all viewpoints
• Standardizes infrastructure and application architecture and frameworks for on-premises and in cloud
• Promotes the EA/SA process, outcomes, and results to the organization, including the enterprise's technology and business leaders
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
• Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services

Enterprise Cyber Security Architecture Manager

• Directs the program to develop, maintain, and leverage key Enterprise Architecture (EA) principles across the organization
• Leads the creation or evolution of the EA/SA function
• Partners with TODD and business leaders to understand, support, and advance the enterprise's business and technology strategies
• Leads the identification and analysis of enterprise business drivers to derive enterprise business, information, technical, and solution architecture requirements
• Analyzes industry, technology, and market trends to determine their potential impacts on the enterprise
• Analyzes the current business and technology environment to detect critical deficiencies and recommends solutions for improvement
• Leads the development of an implementation plan for EA/SA based on business requirements and technology strategies
• Oversees EA/SA implementation, ongoing refinement activities, and the documentation of all design and analysis work
• Consults with program/project teams to fit solutions to architecture across all viewpoints
• Standardizes infrastructure and application architecture and frameworks for on-premises and in cloud
• Promotes the EA/SA process, outcomes, and results to the organization
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored

• Operate as a hands-on security engineer with broad influence across the enterprise
• Partner directly with engineering, platform, and business teams to shape secure outcomes
• Provide practical security guidance and assess risk in real-world implementations
• Help ensure that new tools, platforms, and integrations are designed and deployed securely
• Contribute across multiple areas including security tooling, cloud security, and emerging domains such as AI
• Collaborate with technical teams and cloud service providers to ensure compliance with security best practices

Senior Cyber Security Engineer

• Develops cyber security architecture/designs, controls, processes, standards, and strategies to ensure alignment with Information Security standards, emerging threats, and overall Information Security strategy
• Develops and implements incident response protocols for ongoing threats and attacks
• Communicates status of current threat environment, incidents, and projected threats to senior management and executives
• Manages the evaluation and testing of hardware, firmware, and software for possible impact on systems security
• Coordinates with other managers to integrate Information Security project components with other projects including application development, network, server, and mainframe
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
• Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services

Cyber Security Manager, Customer Identity and Access Management

• Supports applicable services for cloud applications, infrastructure, platform security, and related technologies within the Cyber Security organization
• Provides technical administration to include troubleshooting support, break-fix operations, patching, and other day-to-day activities for relevant applications
• Stays abreast of industry trends and investigates organizational objectives and needs
• Reviews and maintains operational documentation and reports
• Leads research, proof-of-concept, selection, and implementation of technology solution
• Conducts advanced level of analysis of pros and cons and build vs buy options
• Explores new technologies, solutions, and methods to improve business processes
• Leads examination of technology vision, opportunities and challenges regarding security standards
• Develops and maintains relevant metrics, controls, and governance administration related to cyber security technology
• Participates in on-call rotation for relevant cyber security technologies
• Ensures compliance with risk management programs, rules and regulations
• Collaborates with other teams on projects
• Serves as a mentor to team members
• Acts as a role model in adhering to operational processes, standards, and procedures

Cyber Security Engineer

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Collaborate directly with the IT & Development teams to design and integrate advanced AI security tooling at the application level.
• Take a leading role in enhancing the security capabilities of our flagship in-house application, "Enforcer," by leveraging cutting-edge AI technologies.
• Partner with our Development teams to establish a secure AI development lifecycle.
• Assist in the evaluation, selection, and secure configuration of AI/ML tools, libraries, and platforms to empower our developers while maintaining a robust security posture.
• Act as the central point of contact for vetting and suggesting secure AI solutions for business units across the entire organization.
• Develop and maintain a curated portfolio of approved AI tools and services that align with our security standards and business objectives.
• Stay at the forefront of the rapidly evolving AI landscape, including new technologies, emerging threats, and changing regulatory requirements (e.g., GDPR, CCPA as they relate to AI).
• Provide regular updates and strategic recommendations to leadership on AI-related security matters.
• Manage and optimize our TPRM platform.
• Leverage the platform to establish and streamline a comprehensive AI vendor assessment process, creating clear requirements for onboarding new AI partners and solutions.
• Contribute to the daily operations and strategic initiatives of the broader Information Security team.
• Assist in incident response, threat modeling, and security architecture reviews as needed.

See all jobs on JobTailor

Senior Manager, Cybersecurity Engineering – Factory & Product Assurance

Cybersecurity Manager – SIEM, Detection & Security Analytics

Senior Cybersecurity Engineer

Senior AI Security Architect

Senior Technology, CyberSecurity Compliance Professional

Facility Security Officer

Senior IT Security Engineering Advisor

Cybersecurity Technical Communicator

Vice President – Technology and Security

Product Owner – Cybersecurity

Senior CyberSecurity Engineer, Hashicorp Vault

Senior IT Security Engineer

Security Control Assessor

Enterprise Cyber Security Architecture Manager

Enterprise Cyber Security Architecture Manager

Senior Cyber Security Engineer

Cyber Security Manager, Customer Identity and Access Management

Cyber Security Engineer

WAF/CDN Security Architect

AI Security Architect