Sr Technical Security Product Owner (DevSecOps Engineering)

Become a part of our caring community
The Senior Technical Product Owner serves as the voice of the developer community and IT customer within our DevSecOps Engineering team, ensuring backlog priorities trace to initiative goals and program-level security outcomes. This role owns the backlog for DevSecOps Engineering, Humana's security engineering team spanning software scanning such as SAST/SCA/DAST, cloud security, and AI development. You'll enable an Agile delivery teams by defining features, prioritizing the backlog, and partnering with SMEs on story creation, while working on problems of moderate to substantial complexity with minimal supervision and considerable independent judgment.

Unlike a traditional business Product Owner, this role requires genuine technical fluency — you should be comfortable in architecture discussions about microservices, CI/CD gating logic, and data pipelines, because you'll be prioritizing technical debt reduction, pipeline orchestration, and platform modernization work alongside developer-facing features. We are specifically looking for someone with a software engineering background who has transitioned into product ownership — not a pure business PO learning tech on the job. This is a delivery-focused role: we need someone who doesn't just manage a backlog, but drives features and roadmap items to done, quarter over quarter. The Product Owner maximizes value of product created by Agile team. Liaises with stakeholders and the development team ensuring the right product is being built, in the right order, within budget and by the deadline. Serves as the primary source for backlog prioritization and refinement then drives action. Partners with Product Manager to ensure backlog items advance capability objectives and deliver measurable outcomes within the Product Security service catalog. Advises senior leadership to develop functional strategies (often segment specific) on matters of significance. Exercises independent judgment and decision making on complex issues regarding job duties and related tasks, and works under minimal supervision, uses independent judgment requiring analysis of variable factors and determining the best course of action. Must reside in Louisville KY, Dallas TX, Florida (Ft. Lauderdale/Tampa), or Nashville; office visits required

The Senior Technical Product Owner serves as the voice of the developer community and IT customer within our DevSecOps Engineering team, ensuring backlog priorities trace to initiative goals and program-level security outcomes. This role owns the backlog for DevSecOps Engineering, Humana's security engineering team spanning software scanning such as SAST/SCA/DAST, cloud security, and AI development. You'll enable an Agile delivery teams by defining features, prioritizing the backlog, and partnering with SMEs on story creation, while working on problems of moderate to substantial complexity with minimal supervision and considerable independent judgment.

Unlike a traditional business Product Owner, this role requires genuine technical fluency — you should be comfortable in architecture discussions about microservices, CI/CD gating logic, and data pipelines, because you'll be prioritizing technical debt reduction, pipeline orchestration, and platform modernization work alongside developer-facing features. We are specifically looking for someone with a software engineering background who has transitioned into product ownership — not a pure business PO learning tech on the job. This is a delivery-focused role: we need someone who doesn't just manage a backlog, but drives features and roadmap items to done, quarter over quarter.

You Are a Great Fit If:

• You have a software engineering, DevOps, or DevSecOps background and made the deliberate move into product ownership — you can read a pull request, reason about an API contract, or sit in on an architecture review without needing a translator.
• You love developers, DevSecOps, learning, and research, and you're passionate about the developer experience as a product in its own right.
• You love breaking and building — you're passionate about quality and security, and you can point to specific instances where you found problems, fixed them, and made a dev team's life easier.
• Architects and Red Teamers don't scare you; you can hold your own in a technical conversation with either.
• You apply product thinking and systems thinking to prioritize work that delivers sustainable value — weighing dependencies, feedback loops, and long-term technical debt against short-term asks.
• You're organized, have strong public speaking skills, and can present technical tradeoffs to engineering leadership and executive stakeholders alike.
• You love open source, community, and collaboration, and you're energized by driving cultural transformation, not just ticket flow.
• You're a closer — you take ownership of outcomes through to delivery, not just planning and prioritization.

Responsibilities

• Serve as Product Owner for the DevSecOps Engineering team, driving security outcomes and building out internal cybersecurity tooling used by the entire developer community.
• Help craft and maintain the product roadmap in partnership with team leadership, translating strategic priorities into a sequenced, actionable plan across quarters.
• Own delivery at both the quarterly and sprint level — accountable for translating roadmap commitments into shipped outcomes, tracking progress against PI Objectives, and course-correcting scope or sequencing when delivery is at risk.
• Maintain and prioritize the product backlog, translating platform needs — microservices work (.NET/C#, Azure App Services, Azure Functions, Apigee, Azure Service Bus), data flows (MongoDB, PostgreSQL, Databricks, ADLS Gen2), and pipeline gating (GitHub Actions, Azure DevOps, GLAPI) — into well-formed, ready-to-develop stories.
• Own prioritization decisions balancing new feature work against technical debt reduction, legacy SaaS worker deprecation, and API bloat reduction, in partnership with engineering leads.
• Partner closely with team leadership to hold the delivery team accountable to commitments, removing blockers and escalating risks early rather than after the fact.
• Serve as internal evangelist and communicator for the Product Security team's roadmap, including supply chain security initiatives (JFrog Artifactory, HashiCorp Vault, LaunchDarkly).
• Partner with the Principal DevSecOps Engineer, Engineering Directors, Compliance, Governance, and downstream DevOps teams — serving as the delivery voice within the team while ensuring alignment with program governance and enterprise standards.
• Participate in ART Sync, PO Sync, and PI Planning ceremonies; ensure the technical backlog remains aligned to feature priorities and PI Objectives, and escalate risks or blockers promptly.
• Improve and expand security outcomes across the application portfolio through automation and developer self-service tooling.
• Mentor others and serve as an escalation point for complex backlog or prioritization questions.

Use your skills to make an impact

Required Skills:

• Bachelor's degree and 6+ years of technical experience, including 3+ years of project/product leadership experience.
• At least 3 years of experience in application security, DevOps/DevSecOps, or as a cybersecurity practitioner, with a strong background in product management or leading security outcomes.
• Prior software engineering experience (any of: C#, .NET, JavaScript, Java, Python, TypeScript) sufficient to credibly engage in technical design conversations.
• Demonstrated track record of owning delivery — not just planning it — at the sprint and quarterly/PI level, with clear examples of committed work being shipped on schedule.
• Experience leading a product or development team with a lean Agile delivery mindset.
• Experience with CI/CD practices using Azure DevOps, GitHub, GitLab, JIRA, or similar tools.
• Excellent communication skills with the ability to influence engineering leadership and executive stakeholders.
• Understanding of developer needs, workflows, tooling, and Agile ways of working.

Preferred:

• Exposure to Application Security, SAST/DAST/SCA tooling, or Penetration Testing (e.g., Checkmarx, AppScan, Cycode).
• Familiarity with cloud platforms (Azure, AWS, GCP) and Git-based workflows.
• Product Owner Certification (CSPO, SAFe POPM, or equivalent).
• 3+ years of experience working in a formal product team, with understanding of design, delivery, and ownership.
• Knowledge of OWASP Top 10.
• Uses AI tools and applies systems thinking to daily work.

Bonus:

• Knowledge of common information security frameworks: ISO 27001/27002, ITIL, COBIT, NIST, BSIMM.

Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.

Scheduled Weekly Hours

40

Pay Range

The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.$94,900 - $130,500 per yearThis job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.

Description of Benefits

Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.Application Deadline: 10-23-2026

About us

About Humana: Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health – delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer at Humana.com and at CenterWell.com.

​
Equal Opportunity Employer

It is the policy of Humana not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status. It is also the policy of Humana to take affirmative action, in compliance with Section 503 of the Rehabilitation Act and VEVRAA, to employ and to advance in employment individuals with disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.