Sr Technical Security Product Owner (DevSecOps Engineering)
成为我们关心社区的一部分高级技术产品所有者作为 DevSecOps 工程团队内的开发人员社区和 IT 客户的声音,确保后备优先事项追溯到倡议目标和程序级安全结果。这个角色是 DevSecOPS Engineering,Humana 的安全工程团队的后备,涵盖了 SAST/SCA/DAST 等软件扫描,安全云和人工智能开发。你将通过定义功能,优先考虑后备,并与中小企业合作创建故事,同时在最小监督和相当独立判断的情况下解决适度至实质复杂的问题上工作。与传统的企业产品所有者不同,这个角色需要真正的技术流利。你应该在微服务,CI/CD 门口逻辑和数据管道方面的架构讨论中感到舒服,因为你将优先考虑技术债务降低,管道编排和平台现代化工作以及面向开发人员的功能。我们特别寻找具有软件工程背景的人过渡到产品所有权。这不是纯粹的商业 PO 学习技术员工的工作。这是一个以交付为中心的职位:我们需要有人不仅管理滞后物质,而且推动功能和路线图项目完成季度复制。产品所有者最大限度地利用敏捷团队创建的产品。与利益相关方和开发团队联系,确保正确的产品在适当顺序,预算内和截止日期内建立。作为后备优先级和精炼的主要来源,然后推动行动。与产品经理合作伙伴以确保后备项目提升能力目标并提供可测量的结果。在产品安全服务目录中建议高级领导制定功能战略 (通常是细分类特定)对重要问题。练习独立判断和关于职责和相关任务的复杂问题做出决定,并在最小监督下工作,使用独立判断需要分析变量因素并确定最佳行动路径。必须居住在 Louisville KY,Dallas TX,佛罗里达州 (Ft.Lauderdale/Tampa),或纳什维尔;办公室访问要求高级技术产品所有者作为我们的 DevSecOps 工程团队内的开发人员社区和 IT 客户的声音,确保后备优先事项追踪
查看英文原文
Become a part of our caring community
The Senior Technical Product Owner serves as the voice of the developer community and IT customer within our DevSecOps Engineering team, ensuring backlog priorities trace to initiative goals and program-level security outcomes. This role owns the backlog for DevSecOps Engineering, Humana's security engineering team spanning software scanning such as SAST/SCA/DAST, cloud security, and AI development. You'll enable an Agile delivery teams by defining features, prioritizing the backlog, and partnering with SMEs on story creation, while working on problems of moderate to substantial complexity with minimal supervision and considerable independent judgment.
Unlike a traditional business Product Owner, this role requires genuine technical fluency — you should be comfortable in architecture discussions about microservices, CI/CD gating logic, and data pipelines, because you'll be prioritizing technical debt reduction, pipeline orchestration, and platform modernization work alongside developer-facing features. We are specifically looking for someone with a software engineering background who has transitioned into product ownership — not a pure business PO learning tech on the job. This is a delivery-focused role: we need someone who doesn't just manage a backlog, but drives features and roadmap items to done, quarter over quarter. The Product Owner maximizes value of product created by Agile team. Liaises with stakeholders and the development team ensuring the right product is being built, in the right order, within budget and by the deadline. Serves as the primary source for backlog prioritization and refinement then drives action. Partners with Product Manager to ensure backlog items advance capability objectives and deliver measurable outcomes within the Product Security service catalog. Advises senior leadership to develop functional strategies (often segment specific) on matters of significance. Exercises independent judgment and decision making on complex issues regarding job duties and related tasks, and works under minimal supervision, uses independent judgment requiring analysis of variable factors and determining the best course of action. Must reside in Louisville KY, Dallas TX, Florida (Ft. Lauderdale/Tampa), or Nashville; office visits requiredThe Senior Technical Product Owner serves as the voice of the developer community and IT customer within our DevSecOps Engineering team, ensuring backlog priorities trace to initiative goals and program-level security outcomes. This role owns the backlog for DevSecOps Engineering, Humana's security engineering team spanning software scanning such as SAST/SCA/DAST, cloud security, and AI development. You'll enable an Agile delivery teams by defining features, prioritizing the backlog, and partnering with SMEs on story creation, while working on problems of moderate to substantial complexity with minimal supervision and considerable independent judgment.
Unlike a traditional business Product Owner, this role requires genuine technical fluency — you should be comfortable in architecture discussions about microservices, CI/CD gating logic, and data pipelines, because you'll be prioritizing technical debt reduction, pipeline orchestration, and platform modernization work alongside developer-facing features. We are specifically looking for someone with a software engineering background who has transitioned into product ownership — not a pure business PO learning tech on the job. This is a delivery-focused role: we need someone who doesn't just manage a backlog, but drives features and roadmap items to done, quarter over quarter.
You Are a Great Fit If:
- You have a software engineering, DevOps, or DevSecOps background and made the deliberate move into product ownership — you can read a pull request, reason about an API contract, or sit in on an architecture review without needing a translator.
- You love developers, DevSecOps, learning, and research, and you're passionate about the developer experience as a product in its own right.
- You love breaking and building — you're passionate about quality and security, and you can point to specific instances where you found problems, fixed them, and made a dev team's life easier.
- Architects and Red Teamers don't scare you; you can hold your own in a technical conversation with either.
- You apply product thinking and systems thinking to prioritize work that delivers sustainable value — weighing dependencies, feedback loops, and long-term technical debt against short-term asks.
- You're organized, have strong public speaking skills, and can present technical tradeoffs to engineering leadership and executive stakeholders alike.
- You love open source, community, and collaboration, and you're energized by driving cultural transformation, not just ticket flow.
- You're a closer — you take ownership of outcomes through to delivery, not just planning and prioritization.
Responsibilities
- Serve as Product Owner for the DevSecOps Engineering team, driving security outcomes and building out internal cybersecurity tooling used by the entire developer community.
- Help craft and maintain the product roadmap in partnership with team leadership, translating strategic priorities into a sequenced, actionable plan across quarters.
- Own delivery at both the quarterly and sprint level — accountable for translating roadmap commitments into shipped outcomes, tracking progress against PI Objectives, and course-correcting scope or sequencing when delivery is at risk.
- Maintain and prioritize the product backlog, translating platform needs — microservices work (.NET/C#, Azure App Services, Azure Functions, Apigee, Azure Service Bus), data flows (MongoDB, PostgreSQL, Databricks, ADLS Gen2), and pipeline gating (GitHub Actions, Azure DevOps, GLAPI) — into well-formed, ready-to-develop stories.
- Own prioritization decisions balancing new feature work against technical debt reduction, legacy SaaS worker deprecation, and API bloat reduction, in partnership with engineering leads.
- Partner closely with team leadership to hold the delivery team accountable to commitments, removing blockers and escalating risks early rather than after the fact.
- Serve as internal evangelist and communicator for the Product Security team's roadmap, including supply chain security initiatives (JFrog Artifactory, HashiCorp Vault, LaunchDarkly).
- Partner with the Principal DevSecOps Engineer, Engineering Directors, Compliance, Governance, and downstream DevOps teams — serving as the delivery voice within the team while ensuring alignment with program governance and enterprise standards.
- Participate in ART Sync, PO Sync, and PI Planning ceremonies; ensure the technical backlog remains aligned to feature priorities and PI Objectives, and escalate risks or blockers promptly.
- Improve and expand security outcomes across the application portfolio through automation and developer self-service tooling.
- Mentor others and serve as an escalation point for complex backlog or prioritization questions.
Use your skills to make an impact
Required Skills:
- Bachelor's degree and 6+ years of technical experience, including 3+ years of project/product leadership experience.
- At least 3 years of experience in application security, DevOps/DevSecOps, or as a cybersecurity practitioner, with a strong background in product management or leading security outcomes.
- Prior software engineering experience (any of: C#, .NET, JavaScript, Java, Python, TypeScript) sufficient to credibly engage in technical design conversations.
- Demonstrated track record of owning delivery — not just planning it — at the sprint and quarterly/PI level, with clear examples of committed work being shipped on schedule.
- Experience leading a product or development team with a lean Agile delivery mindset.
- Experience with CI/CD practices using Azure DevOps, GitHub, GitLab, JIRA, or similar tools.
- Excellent communication skills with the ability to influence engineering leadership and executive stakeholders.
- Understanding of developer needs, workflows, tooling, and Agile ways of working.
Preferred:
- Exposure to Application Security, SAST/DAST/SCA tooling, or Penetration Testing (e.g., Checkmarx, AppScan, Cycode).
- Familiarity with cloud platforms (Azure, AWS, GCP) and Git-based workflows.
- Product Owner Certification (CSPO, SAFe POPM, or equivalent).
- 3+ years of experience working in a formal product team, with understanding of design, delivery, and ownership.
- Knowledge of OWASP Top 10.
- Uses AI tools and applies systems thinking to daily work.
Bonus:
- Knowledge of common information security frameworks: ISO 27001/27002, ITIL, COBIT, NIST, BSIMM.
- Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.Scheduled Weekly Hours
- 40Pay Range
- The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.$94,900 - $130,500 per yearThis job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.Description of Benefits
- Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.Application Deadline: 10-23-2026
About us
About Humana: Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health – delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer at Humana.com and at CenterWell.com.
Equal Opportunity Employer
It is the policy of Humana not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status. It is also the policy of Humana to take affirmative action, in compliance with Section 503 of the Rehabilitation Act and VEVRAA, to employ and to advance in employment individuals with disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.
Originally posted on Himalayas