Senior Technical Security Product Owner (DevSecOps)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Must reside in Louisville, KY; Dallas, TX; Fort Lauderdale or Tampa, FL; or Nashville, and office visits are required. The position is remote with occasional travel to offices for training or meetings. Home or hybrid home/office work requires a dedicated workspace protecting PHI/HIPAA information and internet speeds of at least 25 Mbps download and 10 Mbps upload.
Base pay: $94,900–$130,500 per year, with eligibility for a bonus incentive plan.
Company
is a U.S. healthcare and insurance company serving people with Medicare, Medicaid, families, individuals, military service personnel, and communities through and CenterWell services.
What you will do
- Own the DevSecOps Engineering product backlog and roadmap for application security, cloud security, AI development, and internal cybersecurity tooling.
- Translate strategic priorities and platform needs into sequenced features, actionable stories, and measurable security outcomes.
- Drive sprint, quarterly, and PI delivery; track commitments, course-correct scope or sequencing, and escalate risks and blockers.
- Prioritize feature work against technical debt, legacy SaaS worker deprecation, API bloat reduction, and platform modernization.
- Partner with engineering leaders, the Principal DevSecOps Engineer, Product Manager, Compliance, Governance, and downstream DevOps teams.
- Improve application-portfolio security through automation and developer self-service tooling, while mentoring others and serving as an escalation point.
Requirements
- Bachelor’s degree or equivalent work experience and 6+ years of technical experience, including 3+ years of project or product leadership experience.
- At least 3 years in application security, DevOps/DevSecOps, or cybersecurity, with a strong background in product management or leading security outcomes.
- Prior software engineering experience with one or more of C#, .NET, JavaScript, Java, Python, or TypeScript, sufficient for technical design discussions.
- Demonstrated ownership of sprint and quarterly/PI delivery, with examples of committed work shipped on schedule.
- Experience leading a product or development team using a lean Agile delivery mindset.
- Experience with CI/CD practices and tools such as Azure DevOps, GitHub, GitLab, or JIRA.
- Excellent communication skills and the ability to influence engineering leadership and executive stakeholders.
- Understanding of developer needs, workflows, tooling, and Agile ways of working.
Nice to have
- Exposure to application-security, SAST, DAST, SCA, or penetration-testing tools such as Checkmarx, AppScan, or Cycode.
- Familiarity with Azure, AWS, or GCP and Git-based workflows.
- Product Owner Certification such as CSPO or SAFe POPM.
- 3+ years in a formal product team with understanding of design, delivery, and ownership.
- Knowledge of the OWASP Top 10 and information-security frameworks including ISO 27001/27002, ITIL, COBIT, NIST, or BSIMM.
- Use of AI tools and systems thinking in daily work.
Culture & Benefits
- Full-time schedule of 40 hours per week with remote work and occasional office travel for training or meetings.
- Dedicated home workspace and internet requirements apply to protect member PHI/HIPAA information.
- Medical, dental, and vision benefits; 401(k); paid time off; company and personal holidays; and paid parental and caregiver leave.
- Short- and long-term disability, life insurance, and other whole-person well-being benefits.
- Bonus incentive eligibility based on company and/or individual performance.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →