Lead Security Architect

Humana; United States; Remote; USD 142,000 - 196,000; Full time

Job summary

Humana is seeking a Lead Security Architect to shape security architecture across the enterprise. You will partner with EIP and business leaders to assess threats, identify gaps, and design forward-looking security solutions that strengthen Humana's security posture.

This role leads security assessments, vulnerability analyses, and product security reviews, guiding secure design in development and aligning with the SDLC and cloud environments.

Qualifications

• Bachelor's degree in IT, CS, or related field.
• 8+ years of cybersecurity experience with at least 5 years in security architecture.
• Experience performing threat modeling and security assessments.
• Experience integrating security controls into SDLC/DevSecOps environments.
• Experience reviewing enterprise application designs.
• Experience remediating vulnerabilities and advising on secure design practices.
• Experience securing APIs, web applications, and cloud workloads.
• Experience with Azure, AWS, or GCP cloud environments.
• Excellent communication with technical and business stakeholders.

Responsibilities

• Perform application security assessments and threat models.
• Determine security requirements from business strategies and requirements.
• Advise on solutions addressing security risks or gaps.
• Lead security assessments, vulnerability analyses, and product security reviews.
• Improve security designs to reduce post-development vulnerabilities.
• Influence stakeholders to fix security deficiencies in designs and code.
• Automation and standardization of security processes.
• Use independent judgment to determine best course of action.

Skills

Threat modeling

Application security assessments

SDLC/DevSecOps

Architecture reviews

Vulnerability remediation

API security

Cloud security (Azure/AWS/GCP)

Stakeholder communication

Secure design practices

Education

Bachelor's degree in IT/CS

Master's degree in IT/CS

Tools

Azure

AWS

GCP

Job description

Become a part of our caring community Do you thrive on designing secure, enterprise-scale solutions that protect critical systems, data, and networks? As a Lead Security Architect in Humana, you will play a key role in shaping the security blueprint for the organization by aligning security architecture and infrastructure with enterprise business and technology priorities. In this role, you will partner with EIP and business leaders to assess emerging threats, identify architectural gaps, and design forward-looking security solutions that strengthen Humana's overall security posture. You will also lead security assessments, vulnerability analysis, and product security reviews while helping develop innovative testing approaches and mitigation strategies for evolving risks. This is a high-impact opportunity to influence enterprise architecture, guide secure technology design, and help protect the business through strategic, modern security architecture. The Lead Security Architect engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge. Additionally, the role actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats. Performs and oversees efforts to conduct vulnerability testing, risk analysis, and security assessments of relevant enterprise / EIP infrastructure. Ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture. The Lead Security Architect role is aligned to a segment (line of business) to proactively discover security issues during solution design and prevent vulnerabilities during development.

Responsibilities for the Lead Security Architect include:

• Perform application security assessments, threat models and enforce design patterns while integrating them into a modern SDLC.
• Determine security architecture requirements by evaluating business strategies and requirements.
• Propose and advise solutions or strategies that address business segment security risks or gaps.
• Use independent judgment requiring analysis of variable factors and determining the best course of action.
• Serve as a single point of contact and develop relationships with business segment (line of business).
• Proactively communicate design and secure development principles to appropriate stakeholders.
• Proactively improve security designs to reduce vulnerabilities found after development of code.
• Influence stakeholders to correct security deficiencies in the solution design as well as developed code.
• Provide solutions to security deficiencies while allowing for necessary business and technical functionality.
• Automation and standardization of all applicable processes.
• Use your skills to make an impact.

Required Qualifications

• Bachelor's degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.)
• 8+ years of cybersecurity experience with at least 5 years focused on security architecture.
• Experience performing threat modeling and application security assessments.
• Experience integrating security controls into modern SDLC and DevSecOps environments.
• Experience conducting architecture and design reviews for enterprise applications.
• Experience remediating security vulnerabilities and advising engineering teams on secure design practices.
• Experience securing APIs, web applications, and cloud-based workloads.
• Experience working within Azure, AWS, or GCP cloud environments.
• Experience communicating security risks and recommendations to technical and business stakeholders.
• Experience implementing enterprise security technologies with organization-wide impact.
• Must be passionate about contributing to an organization focused on continuously improving consumer experiences.

Preferred Qualifications

• Master's Degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.)
• CISSP or CEH or similar certification.
• Experience in Product or Application Security Architecture.
• Certification in one of the leading cloud platforms.

Work at Home Requirements:

• To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested.
• In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs.
• Humana reserves the right to require associates to upgrade their internet service if necessary.
• Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.

Travel:

While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.

Scheduled Weekly Hours

40

Pay Range

$142,300 - $195,700 per year This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.

Description of Benefits

Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.

Application Deadline: 09-29-2026

About us

Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health – delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer atHumana.comand atCenterWell.com.

Equal Opportunity Employer

It is the policy of Humana not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status. It is also the policy of Humana to take affirmative action, in compliance with Section 503 of the Rehabilitation Act and VEVRAA, to employ and to advance in employment individuals with disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.