Cyber Security Engineer

Become a part of our caring community

(Remote in posted locations) We are seeking a hands-on Cyber Security Engineer 2 to join the Product Security Tools team. This role will support the engineering, integration, automation, operationalization, and continuous improvement of enterprise security tools that protect Humana 's applications, SaaS platforms, cloud environments, development pipelines, and security operations workflows.
The selected candidate will work across Product Security, DevSecOps, Cloud Engineering, AI Security, Security Architecture, Scan & Triage, CSOC/TMR, IAM, application teams, and vendors to improve security posture, reduce risk, and strengthen operational maturity across critical platforms such as AppOmni, Cycode, Checkmarx, Wiz, Prisma Cloud, JFrog/Xray, AppScan, and GCP Model Armor.
This role is ideal for an engineer with some hands-on cybersecurity experience who can operate independently, troubleshoot complex tool issues, automate repeatable processes, support security control implementation, and communicate clearly with technical and leadership stakeholders. Job Description:

- Support onboarding, configuration, tuning, and operationalization of Product Security and Cloud Security tools.

- Integrate tools with CI/CD pipelines, developer workflows, cloud platforms, Splunk, ServiceNow, M365, and other enterprise systems.

- Support AppOmni SSPM activities, including SaaS posture visibility, AI application discovery, reporting, and platform expansion.

- Support Cycode secrets detection activities, including remediation tracking, root-cause analysis, preventive controls, and reporting.

- Help operationalize Wiz, Checkmarx, JFrog/Xray, AppScan, Prisma Cloud, GCP Model Armor, and related security capabilities.

- Support Azure/GCP/AWS cloud security controls, policy development, deployment pipelines, and exception support.

- Build reports, dashboards, metrics, and executive summaries for tool health, risk posture, findings, remediation, and operational progress.

- Support rules/policy lifecycle management, tool access reviews, vendor cadences, QBRs, and health-check meetings.

- Troubleshoot tool outages, scan issues, integration issues, and user-reported incidents.

- Create and maintain SOPs, playbooks, KT documentation, escalation paths, and process guides.

- Partner with cross-functional teams to improve security outcomes, reduce manual effort, and strengthen operational efficiency.

- Experience with AppOmni, Cycode, Checkmarx, Wiz, Prisma Cloud, JFrog/Xray, AppScan, BurpSuite, NowSecure, or GCP Model Armor.

- Experience integrating security tools with Splunk, ServiceNow, Azure DevOps, GitHub, M365, or cloud platforms.

- Experience with AI security controls, Model Armor, AI application discovery, or AI posture management.

- Experience with vendor coordination, QBRs, rule-release reviews, and tool roadmap discussions.

- Experience in regulated enterprise environments with audit, compliance, change management, and access review expectations.

Use your skills to make an impact

Required Qualifications

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or a related technical field.

- Proven commitment to continuous learning and professional development through advanced technical training, certifications, participation in security communities, or contributions to cybersecurity and cloud security best practices.

Preferred Qualifications

- Master's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.

- Industry-recognized security and cloud certifications such as CompTIA Security+, CISSP, CCSP, GIAC, Google Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate, AWS Certified Security - Specialty, or equivalent certifications demonstrating expertise in cloud security and cybersecurity.

- Demonstrated experience applying industry security frameworks, cloud securi