Description:
The Lead Security Architect engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge. Additionally, the role actively works to identify gaps within existing EIP reference architecture and designs updates to impacted security architecture elements to mitigate emerging threats. Performs and oversees efforts to conduct vulnerability testing, risk analysis, and security assessments of relevant enterprise / EIP infrastructure. Ensures EIP and Humana stakeholder security requirements are necessary to protect Humana's business functions and are adequately addressed in all aspects of enterprise architecture.
The Lead Security Architect role is aligned to a segment (line of business) to proactively discover security issues during solution design and prevent vulnerabilities during development.
Responsibilities For The Lead Security Architect Include
- Perform application security assessments, threat models and enforce design patterns while integrating them into a modern SDLC.
- Determine security architecture requirements by evaluating business strategies and requirements.
- Propose and advise solutions or strategies that address business segment security risks or gaps.
- Use independent judgment requiring analysis of variable factors and determining the best course of action.
- Serve as a single point of contact and develop relationships with business segment (line of business)
- Proactively communicate design and secure development principles to appropriate stakeholders
- Proactively improve security designs to reduce vulnerabilities found after development of code
- Influence stakeholders to correct security deficiencies in the solution design as well as developed code
- Provide solutions to security deficiencies while allowing for necessary business and technical functionality
- Automation and standardization of all applicable processes
Required Qualifications
Use your skills to make an impact
- Bachelor's degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.)
- 8+ years of cybersecurity experience with at least 5 years focused on security architecture.
- Experience performing threat modeling and application security assessments.
- Experience integrating security controls into modern SDLC and DevSecOps environments.
- Experience conducting architecture and design reviews for enterprise applications.
- Experience remediating security vulnerabilities and advising engineering teams on secure design practices.
- Experience securing APIs, web applications, and cloud-based workloads.
- Experience working within Azure, AWS, or GCP cloud environments.
- Experience communicating security risks and recommendations to technical and business stakeholders.
- Experience implementing enterprise security technologies with organization-wide impact.
- Must be passionate about contributing to an organization focused on continuously improving consumer experiences
Preferred Qualifications
- Master's Degree in relevant information technology field (Information Technology, Information System Management, Computer Science, etc.)
- CISSP or CEH or similar certification
- Experience in Product or Application Security
- Architecture Certification in one of the leading cloud platforms