Lead CyberSecurity Engineering
About The Position
The Lead CyberSecurity Engineer forecasts roadmap work and plans it into two-week sprints. Shifts in prioritization due to industry changes call for independent judgment, technical leadership, and the ability to influence security outcomes across teams and business functions. The role defines solutions, leads cross-functional initiatives, and serves as a trusted advisor on web application and edge security matters. The successful candidate is a hands-on security leader with expertise in web application security, cloud technologies, and threat mitigation. The role includes designing and implementing security solutions for web applications, APIs, and cloud-hosted services; leading and optimizing WAF and Bot Management platforms; analyzing threats and vulnerabilities; developing security automation; advising on AI-related security risks; and driving enterprise security improvements in collaboration with application, infrastructure, and security teams. This is a remote position. Occasional travel to Humana offices for training or meetings may be required. Employees working from home must have internet service with at least 25 Mbps download and 10 Mbps upload and a dedicated workspace without ongoing interruptions to protect member PHI/HIPAA information. The position is scheduled for 40 hours per week.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
- At least 8 years of experience in cybersecurity, application security, or information security.
- At least 5 years of hands-on experience designing and supporting WAF and Bot Management solutions.
- Strong knowledge of OWASP Top 10, API security, authentication, and web security architectures.
- Experience with HTTP/S, TLS/SSL, DNS, CDNs, load balancing, and cloud-hosted applications.
- Hands-on experience with Python, PowerShell, REST APIs, or security automation tools.
- Proven ability to assess threats, drive remediation efforts, and lead complex security initiatives.
- Ability to work effectively from home with internet service of at least 25 Mbps download and 10 Mbps upload, and a dedicated workspace without ongoing interruptions.
Nice To Haves
- Experience with AI security, security automation, and DevSecOps practices.
- Relevant certifications such as CISSP, CCSP, GIAC, CEH, or equivalent.
- Experience in healthcare or other highly regulated environments.
Responsibilities
- Design and implement security solutions for web applications, APIs, and cloud-hosted services.
- Lead and optimize WAF and Bot Management platforms, including Akamai, Cloudflare, Imperva, AWS WAF, Azure WAF, and F5 Distributed Cloud.
- Apply web application security best practices, including OWASP Top 10, API security, authentication, and attack mitigation techniques.
- Develop security automation using Python, PowerShell, REST APIs, and related technologies.
- Analyze threats, investigate vulnerabilities, and implement mitigation strategies.
- Provide guidance on AI-related security risks and support automated remediation initiatives.
- Collaborate with application, infrastructure, and security teams to drive security outcomes.
- Lead roadmap planning, technical initiatives, and Agile-based security projects.
- Forecast roadmap work and plan it into two-week sprints.
Benefits
- Medical benefits
- Dental benefits
- Vision benefits
- 401(k) retirement savings plan
- Paid time off
- Company and personal holidays
- Paid parental and caregiver leave
- Short-term disability
- Long-term disability
- Life insurance
- Bonus incentive plan based on company and/or individual performance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
