Application Security & DevSecOps Architect

Medical Mutual; Brooklyn (OH); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Equipment provided

On-site fitness center

On-site cafeteria

Employee discounts

Cash rewards

Business casual attire

Job summary

Medical Mutual is seeking an Application Security & DevSecOps Architect to lead secure application architecture and embed security across the SDLC. The role acts as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

The candidate will drive secure design across multiple teams, integrate security tooling (SAST/DAST/SCA), and oversee cloud and container security in a hybrid on-site/office environment in Dublin, OH.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.
• 3-5-7 years proven ability to transfer technology to end-user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).
• Experience influencing technical direction in application, databases, or infrastructure.

Responsibilities

• Act as a subject-matter expert (SME) to design secure architectures and advise on best practices.
• Assist in defining current and future state and transitional plan with incremental improvement.
• Collaborate in reviews of prospective software/hardware acquisitions for architecture compatibility.
• Review IT standards, policies, and develop architectural metrics and reports.
• Maintain awareness of IT industry developments and best practices.
• Perform other duties as assigned.

Skills

Influence technical direction

Security architecture mindset

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk/Wiz/Checkmarx/Veracode/Semgrep/SonarQube

Qualys/Burp Suite/OWASP ZAP/Invicti

SCA and IaC scanning

Docker/Kubernetes

Azure DevOps, GitHub Actions, Jenkins, GitLab

AWS/Azure security

Job description

Application Security & DevSecOps Architect

Hybrid remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in‑office days each week. Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio, providing peace of mind to more than 1.2 million members through high‑quality health, life, disability, dental, vision and indemnity plans.

The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery. The role serves as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

Preferred Technical Skills

• Hands‑on experience with application security tooling:




• SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube)


• DAST (Qualys, Burp Suite, OWASP ZAP, Invicti)


• SCA, IaC scanning, container security tools




• Strong knowledge of:




• OWASP Top 10, CWE Top 25


• Threat modeling (STRIDE, PASTA, or equivalent)


• API security and authentication (OAuth2, OIDC, SAML)




• Experience with:




• CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab)


• Cloud security (AWS, Azure)


• Containers and orchestration (Docker, Kubernetes)




• Working knowledge of secure architecture patterns and Zero Trust principles

Responsibilities

• Act as a subject‑matter expert (SME) to assist various IT areas in supporting efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.


• Assist in defining the current and future state and the transitional plan. Focus on incremental improvements moving toward the future state, identifying opportunities to streamline environments and remove redundancy.


• Collaborate within teams and participate in reviews of all prospective software and hardware acquisitions. Evaluate compatibility with current architecture and support future architecture roadmaps. Identify architectural risks and propose alternatives and solutions, documenting exceptions to architectural standards.


• Assist in the review and revisions of new and existing IT standards and policies, evaluating their importance, and help develop architectural metrics and reports.


• Maintain active awareness of IT industry developments, emerging trends, development tools and best practices.


• Perform other duties as assigned.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.


• 3‑5‑7 years proven ability to transfer technology to end‑user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).


• Experience influencing technical direction in application, databases, or infrastructure.


• Professional certifications: None required.

Technical Skills and Knowledge

• Expertise in one or more technologies (Microsoft, OpenSource, databases).


• Experience with suite of IT applications including transactional, middleware integration, workflow, web‑based.


• Solid/advanced knowledge in infrastructure and networks with a focus on security.


• Solid/advanced understanding of various project methodology disciplines and information and systems architectures, highly proficient in website architectures.


• Advanced knowledge of database platforms and data warehousing.


• Exposure to EA Framework such as FEAC, TOGAF or DODAF.

Great Place to Work

• Equipment provided: laptop, monitors, keyboard, mouse, headset.


• On‑site fitness center or gym membership reimbursement.


• On‑site cafeteria serving hot breakfast and lunch at the Brooklyn, OH headquarters.


• Discounts at many places in and around town for Medical Mutual team members.


• Opportunity to earn cash rewards for shopping with our customers.


• Business casual attire, including jeans.

Excellent Benefits and Compensation

• Employee bonus program.


• 401(k) with company match up to 4% and additional company contribution.


• Health Savings Account with a company matching contribution.


• Excellent medical, dental, vision, life and disability insurance.


• Employee Assistance Program with counseling, coaching, self‑help resources and work/life assistance.


• Company holidays and up to 16 PTO days during the first year of employment, with options to carry over unused PTO.


• After 120 days of service, parental leave for eligible employees who become parents through maternity, paternity or adoption.

An Investment in You

• Career development programs and classes.


• Mentoring and coaching to help advance your career.


• Tuition reimbursement up to $5,250 per year (IRS maximum).


• Diverse, inclusive and welcoming culture with Business Resource Groups.

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.