Title: Workday Security & Reporting Technical Lead Location: California Contract Job Description: OVERVIEW Our client is seeking a Technical Lead to join their organization to support Workday platform security and governance. They will lead, manage security, access governance, and data governance activities across the enterprise Workday platform, including HR, finance, payroll, procurement, and supply chain. This role will be responsible for ensuring the platform operates with strong security controls, scalable governance processes, and compliant access models while supporting a modern AI-enabled digital operating platform. In addition to Workday Security Administration, this role will oversee reporting and data access governance, support audit and compliance activities, and partner closely with HR, Finance, IT, internal audit, and enterprise architecture teams to enable a secure, scalable, and well-governed platform. This individual will play a key role in supporting the organization’s long-term roadmap for AI-enabled workflows, intelligent automation, and agentic capabilities within the Workday system ecosystem. *Must be eligible to work on W2 without sponsorship. Not eligible for C2C. - Pay Rate: $80 – $85/hr - Duration: 6-month contract-to-hire - Location: Hybrid; 2x/week in office — San Diego, Long Beach, Sacramento, Rancho Cordova, or Oakland (SF Bay Area) RESPONSIBILITIES Security Administration & Governance • Lead the design, administration, and optimization of Workday security across HCM, Finance, Payroll, Procurement, and Supply Chain modules. • Manage role-based security, domain security policies, business process security policies, and segregation of duties controls. • Partner with functional and technical teams to ensure secure and scalable access models aligned to business requirements. • Oversee user provisioning, proxy governance, access reviews, and security audits. • Support organizational changes, acquisitions, and restructuring activities by evaluating and implementing appropriate security updates. • Establish and maintain governance processes for security, data access, tenant management, and platform controls. • Partner with internal audit, compliance, and information security teams to support SOX, privacy, and regulatory requirements. • Develop and maintain security documentation, standards, and operational procedures. • Monitor platform risks and proactively identify opportunities to strengthen governance and controls. Reporting & Data Access Governance • Govern Workday reporting security and sensitive data access. • Partner with reporting and analytics teams to ensure appropriate access controls and data usage standards. • Support governance of calculated fields, dashboards, and analytics capabilities including Prism and future AI-enabled reporting solutions. AI Enablement & Platform Modernization • Support and enable AI-assisted capabilities across the Workday platform, including intelligent workflows, recommendations, automation, and emerging agentic AI capabilities. • Partner with enterprise AI and architecture teams to evaluate secure and responsible adoption of AI-enabled features and data access models. • Define governance standards for AI-driven workflows, automation, and data usage across the platform. Platform Operations & Continuous Improvement • Serve as the primary escalation point for complex security and governance issues. • Support Workday releases, testing cycles, and ongoing platform enhancements. • Identify opportunities to simplify security models, improve user experience, and increase operational efficiency. • Drive continuous improvement and platform governance maturity across the Workday ecosystem. QUALIFICATIONS • Bachelor’s degree required; preferred in Computer Science, Data Science, Information Technology, or a related field. • 7+ years of hands-on experience implementing and configuring Workday Security, Reporting, Prism, Adaptive, and Extend. • Deep understanding of Workday security architecture, including domain security policies, business process security policies, and role-based access controls. • Familiarity with Workday modules across HCM, Payroll, Finance, Strategic Sourcing, and Procurement. • Experience with audit, compliance, segregation of duties, and enterprise access governance processes. • Experience supporting enterprise-scale platform operations in a complex, matrix environment. • Demonstrated experience enabling AI and intelligent automation capabilities within enterprise platforms, including familiarity with AI-supported workflows, event-driven automation, and emerging agentic operating models. • Strong analytical, problem-solving, and stakeholder management skills. • Excellent communication and cross-functional collaboration abilities. • Experience supporting Workday implementations and large-scale transformation programs. • Experience with Workday Prism, Workday Adaptive, Workday Extend, or enterprise analytics platforms preferred. • Familiarity with ServiceNow, identity and access management, or enterprise governance frameworks preferred. • Experience supporting AI governance, intelligent automation, or data privacy initiatives preferred. • Workday certifications preferred. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.

Title: Application Security & DevSecOps Architect Location: Dublin, Ohio, 43017, United States Department: IT Architecture Full-Time Hybrid Job Description: Medical Mutual employees must submit their applications through MySource. This is a hybrid‑remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in‑office days each week. Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio. We provide peace of mind to more than 1.2 million members through our high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement, and individual plans. The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery and serve as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security. We're seeking candidates with these preferred technical skills: - Hands-on experience with application security tooling: - SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube) - DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) - SCA, IaC scanning, container security tools - Strong knowledge of: - OWASP Top 10, CWE Top 25 - Threat modeling (STRIDE, PASTA, or equivalent) - API security and authentication (OAuth2, OIDC, SAML) - Experience with: - CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab) - Cloud security (AWS, Azure) - Containers and orchestration (Docker, Kubernetes) - Working knowledge of secure architecture patterns and Zero Trust principles Architect I Job Summary: Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Acts as a subject matter expert (SME) to assist various IT areas to support efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence. - Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Assists in the review and revisions of new and existing IT standards and policies evaluating their importance. Assists in the development of architectural metrics and reports. - Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices. - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 3 years proven ability to transfer technology to end user applications/environments. - Experience in cutting edge web collaboration design patterns and best practices Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Database (relational, graph, Map, document, etc.). - Basic knowledge in infrastructure and networks with focus on security. - Basic understanding of various project methodology disciplines with basic knowledge of information and systems architectures, highly proficient in website architectures. - Basic understanding of various data base platforms and data warehousing. Architect II Job Summary: Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure). - Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Reviews new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. Develops architectural metrics and reports for the executive team, business and IT management. - Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 5 years proven ability to transfer technology to end user applications/environments. - 2 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure. Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document). - Experience with suite of IT applications including transactional, middleware integration, workflow, web based. - Solid knowledge in infrastructure and networks with a focus on security. - Solid understanding of various project methodology disciplines with solid knowledge of information and systems architectures, highly proficient in website architectures. - Solid understanding of various data base platforms and data warehousing. - Exposure to EA Framework such as FEAC, TOGAF or DODAF. Architect III Job Summary: Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure). - Defines the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Review new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. develops architectural metrics and reports for the executive team, business and IT management. - Maintain active awareness of IT industry including new developments, emerging trends, development tools and best practices - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 7 years proven ability to transfer technology to end user applications/environments. - 3 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure. Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document). - Experience with suite of IT applications including transactional, middleware integration, workflow, web based. - Advanced knowledge in infrastructure and networks with a focus on security. - Advanced understanding of various project methodology disciplines with advanced knowledge of information and systems architectures, highly proficient in wesite architectures. - Advanced understanding of various data base platforms and data warehousing. - Exposure to EA Framework such as FEAC, TOGAF or DODAF. Medical Mutual is looking to grow our team! We truly value and respect the talents and abilities of all of our employees. That's why we offer an exceptional package that includes: A Great Place to Work: - We will provide the equipment you need for this role, including a laptop, monitors, keyboard, mouse and headset. - Whether you are working remote or in the office, employees have access to on-site fitness centers at many locations, or a gym membership reimbursement when there is no Medical Mutual facility available. Enjoy the use of weights, cardio machines, locker rooms, classes and more. - On-site cafeteria, serving hot breakfast and lunch, at the Brooklyn, OH headquarters. - Discounts at many places in and around town, just for being a Medical Mutual team member. - The opportunity to earn cash rewards for shopping with our customers. - Business casual attire, including jeans. Excellent Benefits and Compensation: - Employee bonus program. - 401(k) with company match up to 4% and an additional company contribution. - Health Savings Account with a company matching contribution. - Excellent medical, dental, vision, life and disability insurance — insurance is what we do best, and we make affordable coverage for our team a priority. - Access to an Employee Assistance Program, which includes professional counseling, personal and professional coaching, self-help resources and assistance with work/life benefits. - Company holidays and up to 16 PTO days during the first year of employment with options to carry over unused PTO time. - After 120 days of service, parental leave for eligible employees who become parents through maternity, paternity or adoption. An Investment in You: - Career development programs and classes. - Mentoring and coaching to help you advance in your career. - Tuition reimbursement up to $5,250 per year, the IRS maximum. - Diverse, inclusive and welcoming culture with Business Resource Groups. About Medical Mutual: Medical Mutual’s status as a mutual company means we are owned by our policyholders, not stockholders, so we don’t answer to Wall Street analysts or pay dividends to investors. Instead, we focus on developing products and services that allow us to better serve our customers and the communities around us. There’s a good chance you already know many of our Medical Mutual customers. As the official insurer of everything you love, we are trusted by businesses and nonprofit organizations throughout Ohio to provide high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement and individual plans. Our plans provide peace of mind to more than 1.2 million Ohioans. We’re not just one of the largest health insurance companies based in Ohio, we’re also the longest running. Founded in 1934, we’re proud of our rich history with the communities where we live and work.

Role Description Our team is continuously growing alongside our expanding client base, so we are looking for a SOC Incident Response Specialist who is eager to apply their technical expertise, develop in the field of security, and work with real incidents and modern tools. What you will do: - Manage security and operational incidents end-to-end, including investigation, coordination, and response; - Communicate directly with Clients and stakeholders during Data Breach incidents; - Conduct Root Cause Analysis, develop preventive measures, and prepare management reports; - Analyze Clients’ workflows and incident trends to identify risks and improve security processes; - Assess the security of software, platforms, and third-party vendors; - Review new hiring locations for compliance with data protection and security standards; - Develop incident response procedures and maintain internal security documentation and knowledge base. Qualifications - Proven experience in investigating and handling information security incidents (from 1 year); - Experience in developing incident management procedures and documentation; - Analytical mindset and the ability to make fast decisions to mitigate incident impact; - Strong self-organization skills and the ability to prioritize work independently; - Understanding of data privacy principles and breach notification requirements; - English proficiency at level B2 or higher. Requirements - Proficiency in OSINT methodologies for investigations; - Experience in assessing the security of software, platforms, and third-party vendors; - Basic knowledge of security tools logic (SIEM, EDR, DLP, NGFW, VPN, VDI). Benefits - Providing services during business hours; - Opportunity to cooperate fully remotely; - Inclusive international environment; - Compensation in USD; - Rewards for referring friends; - Balance between project workload and personal time, but also – internal health policy; - Responsive leadership interested in your growth and long-lasting cooperation; - Greenhouse conditions for self-development; - A culture built on trust, with no time-tracking requirements. *The items listed in this section may vary depending on the terms of your engagement. Certain benefits and conditions typically apply to employees; independent contractors may not be eligible for all of these. The specific terms, including compensation, benefits, and work conditions, will be clearly defined in your agreement if selected.

• Colaborar en un proyecto del sector seguros en modalidad full-remote. • Coordinar y ejecutar pruebas de penetración. • Identificar riesgos de ciberseguridad y proponer enfoques de mitigación. • Estructurar y metodizar múltiples actividades de seguridad concurrentes.