Director of DevSecOps Automation and Engineering

About the Role

Employment Type: Full time

Become a part of our caring community and help us put health first. This role will include managing a team of DevSecOps engineers, architects, testers, developers, and specialists who build and support our application security orchestration platform. Additionally, they will support various commercial application security tooling and contribute to enterprise application security strategy.

This role will leverage agile software development practices and work to embed security throughout Humana information security and technology-related infrastructures (i.e., tools, applications, and systems). Designs, develops, tests, and evaluates the security of Humana information security tools, applications, and systems throughout their development life cycle. Defines and establishes best practices for security tool integration and configuration.

Decisions are typically related to the implementation of new/updated programs or large-scale projects for the function and supporting technical/operational procedures and processes, and implements strategic plans, drives goals and objectives, and improves performance.

This role reports directly to the Associate Vice President of Product Security.

Responsibilities

• Manages team of (25-30) associates and contractors
• Manages professional services contract, software renewals, budget and capacity planning.
• Contribute to and execute on our secure software development strategy for the enterprise.
• Manage and drive automation to integrate Application Security into teams across the enterprise
• Partner with our Security Automation Product Owner, Product Security Product Manager, Product Security Governance, DevOps, Enterprise Information Protection and Enterprise Architecture teams.
• Improve and expand application security quality across our entire portfolio of applications
• Create and supports metrics that improved code quality, reduced security defects and progress over time
• Manage continuous release planning and execution and integrate with security design and engineering work across multiple groups and technical constituencies
• Develop and maintain relationships across technology organization, the security industry, peer organizations and other entities as necessary to benchmark Company Application Security program and keep current in best practices
• Develop and mentor staff to achieve career goals and maintain leadership succession planning

Use your skills to make an impact.

Required Qualifications

• Bachelor’s degree in related field (Business, Information Services, IT, Information Security, Computer Science etc.);
• 8+ years of managerial work-experience in a highly diversified organization. Experience with a complex work environment in progressive management roles in large, complex organizations.
• 2+ years experience in enabling organizations with DevOps, DevSecOps or similar large initiatives with high strategy involvement
• Excellent communication skills with the ability to influence others
• Analytical and problem solving skills. Believes in extreme ownership.
• Must be passionate about contributing to an organization focused on continuously improving consumer experiences
• Must be passionate about developer experience, privacy, security and product delivery

Preferred Qualifications

• Located in EST or CST timezone
• Cloud experience with Azure, GCP, AWS, Heroku – Azure or GCP Preferred.
• Experience with developing solution architecture and application architecture
• At least 2 years of experience with product design, delivery, and ownership and managing an operational delivery team.
• Knowledge of common information security management frameworks, including but not limited to: ISO 27001/27002, ITIL, COBIT, NIST, BSIMM.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials preferred.