Remote Lead Security Architect - Enterprise Security

Humana Inc

Springfield (IL)

Remote

USD 142,000 - 196,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Humana Inc. is seeking a Lead Security Architect to design enterprise-scale security solutions and align security architecture with business priorities. You will lead assessments, vulnerability analysis, and product security reviews while guiding secure development across EIP and Humana.

You will partner with stakeholders to identify threats, close architectural gaps, and drive forward-looking security controls in SDLC and DevSecOps environments. Remote with occasional travel; 40 hours weekly.

Qualifications

Bachelor's degree in Information Technology, Information Systems Management or Computer Science.
8+ years of cybersecurity experience with at least 5 years in security architecture.
Experience performing threat modeling and application security assessments.
Experience integrating security controls into modern SDLC and DevSecOps environments.
Experience conducting architecture and design reviews for enterprise applications.
Experience remediating security vulnerabilities and advising engineering teams on secure design practices.
Experience securing APIs, web applications and cloud workloads.
Experience working within Azure, AWS or GCP.
Experience communicating security risks to technical and business stakeholders.
Experience implementing enterprise security technologies with organization-wide impact.
CISSP or CEH or similar certification (preferred).

Responsibilities

Perform application security assessments, threat models and enforce design patterns within a modern SDLC.
Determine security architecture requirements by evaluating business strategies and requirements.
Propose solutions that address security risks or gaps.
Use independent judgment to determine best action.
Serve as a single point of contact with business segments.
Communicate design and secure development principles to stakeholders.
Improve security designs to reduce post-development vulnerabilities.
Influence stakeholders to fix security deficiencies in design and code.
Provide solutions balancing security and necessary functionality.
Automate and standardize applicable security processes.