Lead CyberSecurity Engineering

Become a part of our caring community   The Lead CyberSecurity Engineer will forecast Roadmap work and plan into two-week sprints. Shifts in prioritization due to industry changes will require independent judgement, technical leadership, and the ability to influence security outcomes across multiple teams and business functions. This role regularly defines solutions, leads cross-functional initiatives, and serves as a trusted advisor for web application and edge security matters. The ideal candidate is a hands-on security leader with deep expertise in web application security, cloud technologies, and threat mitigation. They excel at influencing stakeholders, solving complex security challenges, and driving enterprise-wide security improvements.

Design and implement security solutions for web applications, APIs, and cloud-hosted services. Lead and optimize WAF and Bot Management platforms (Akamai, Cloudflare, Imperva, AWS WAF, Azure WAF, F5 Distributed Cloud, etc.). Apply web application security best practices, including OWASP Top 10, API security, authentication, and attack mitigation techniques. Develop security automation using Python, PowerShell, REST APIs, and related technologies. Analyze threats, investigate vulnerabilities, and implement mitigation strategies. Provide guidance on AI-related security risks and support automated remediation initiatives. Collaborate with application, infrastructure, and security teams to drive security outcomes. Lead roadmap planning, technical initiatives, and Agile-based security projects. Use your skills to make an impact   Required Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field. 8+ years of experience in cybersecurity, application security, or information security. 5+ years of hands-on experience designing and supporting WAF and Bot Management solutions. Strong knowledge of OWASP Top 10, API security, authentication, and web security architectures. Experience with HTTP/S, TLS/SSL, DNS, CDNs, load balancing, and cloud-hosted applications. Hands-on experience with Python, PowerShell, REST APIs, or security automation tools. Proven ability to assess threats, drive remediation efforts, and lead complex security initiatives.

Experience with AI security, security automation, and DevSecOps practices. Relevant certifications such as CISSP, CCSP, GIAC, CEH, or equivalent. Experience in healthcare or other highly regulated environments. Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.   Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.   Scheduled Weekly Hours 40 Pay Range The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.   $142,300 - $195,700 per year   This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance. Description of Benefits Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive