• Administer, configure, and maintain HashiCorp Vault for secure secrets management across Azure and Google Cloud Platform (GCP) environments. • Integrate Vault with enterprise cloud workloads, ensuring robust access control and compliance with Humana's security standards. • Develop and implement automation scripts and tools to support infrastructure management and operational efficiency, using PowerShell, Python, Ruby, or Bash. • Support installation, configuration, and maintenance of cloud-based servers and services, ensuring reliability and scalability in multi-cloud settings. • Collaborate with cross-functional teams to design and enhance secure cloud architectures, contributing to continuous improvement initiatives. • Monitor, identify, and remediate cybersecurity issues and opportunities, in alignment with Humana's IT/Cyber IOP policies. • Ensure accurate documentation and compliance for technology lifecycle management, including decommission requests as required. • Provide regular updates, evidence of remediation, and participate in closure reviews of IT/Cyber IOPs.

Role Description Our client is hiring a Lead Cyber Security Engineer to help secure the infrastructure, systems, applications, and enterprise environments powering a rapidly scaling AI-native SaaS platform. You will lead security initiatives across cloud infrastructure, enterprise systems, compliance, vulnerability management, and operational security while partnering closely with engineering leadership and enterprise customers. This is a highly impactful role with direct visibility into platform architecture, security strategy, compliance readiness, and long-term enterprise scalability. Responsibilities - Lead security strategy across infrastructure, cloud systems, and enterprise applications - Drive SOC 2, ISO 27001, and ISO 42001 readiness/certifications - Own vulnerability management, threat monitoring, and incident response workflows - Secure APIs, cloud infrastructure, enterprise systems, and multi-tenant environments - Partner closely with engineering leadership on secure architecture and platform decisions - Build and improve internal security policies, controls, and operational procedures - Support enterprise customer security reviews, audits, etc. - Help establish long-term security operations, governance, and compliance practices Qualifications - 4 to 10+ years of hands-on experience securing production-grade infrastructure, cloud systems, APIs, and enterprise SaaS platforms operating in real-world customer environments - Experience leading SOC 2 and ISO 27001 compliance initiatives/certifications - Strong cloud security experience across AWS, GCP, or Azure - Experience with vulnerability management, SIEM tooling, and threat detection - Strong understanding of enterprise SaaS security architecture and multi-tenant systems - Experience supporting regulated environments and handling customer PII securely - Strong communication skills with the ability to work cross-functionally with technical and non-technical teams - Startup mentality with strong ownership, urgency, and execution skills Benefits - 10 days PTO - Paid holidays - Work-from-home equipment provided, including laptop and monitors - Health, medical, and vision coverage - Early-stage startup environment with direct impact on product and company growth - Opportunity to help shape the future of an AI-native enterprise platform Interview Process - Initial conversation with our recruiting team (SaaS Talent) - 1-hour introductory conversation with Founder / CEO - Technical deep dive/system design interview - Final 30-minute conversation with leadership and founders Compensation USD 140,000 - USD 175,000 yearly

• Provide best-in-class project management, oversight, build, and customer service for end users and stakeholders of the EHR system • Manage multiple project workstreams across multiple clients (time slicing) • Develop, mentor, train and oversee a team of analysts ranging from entry level to senior • Manage scope, work product, and time billed for resources assigned to your teams and projects • Develop training curricula and materials to support the development of entry level analysts • Identify opportunities for improvement in the engagement offering and additional value to the client (speed, quality, cost) • Stay attuned to new features, functionalities, and strategic direction in the EHR related to their domain of expertise • Translate complex requirements from stakeholders into workflows and build and document decisions for future reference • Assess criticality of requests against the current system functionality, maintenance implications, and value of the build for stakeholders • Perform design, build, and testing for application functions with minimal errors • Drive data analysis and reporting to support clinical and administrative decision-making • Increase firm presence through social media, community involvement, and professional associations

• Lead and approve security assessments for AI-enabled products, AI-bearing vendors, and third-party technologies • Act as the escalation point and named reviewer for high-risk and AI-related engagements • Define and continuously improve AI-focused assessment frameworks, including controls, evidence standards, and scoring models • Drive automation of assessment processes to improve efficiency, scalability, and turnaround time • Partner with TPRM, Procurement, Legal, Privacy, and Architecture teams to embed security into vendor selection and lifecycle processes • Provide expert advice on regulatory, legal, and third-party risk implications during solution design and vendor selection • Maintain audit-ready documentation and support regulatory compliance (e.g., OSFI B-13) • Produce risk reporting and insights for cybersecurity leadership • Monitor emerging AI threats and regulatory developments and integrate them into assessment practices • Mentor junior team members and support capability development