Application Security & DevSecOps Architect

Application Security & Dev Sec Ops  Architect

Medical Mutual employees must submit their applications through MySource. This is a hybrid‑remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in‑office days each week. The Application Security & Dev Sec Ops  Architect will lead the design and implementation of secure application architecture and Dev Sec Ops  practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery while serving as the primary technical authority for application security, vulnerability management, and Dev Sec Ops  pipeline security.

• Hands‑on experience with application security tooling:
  • SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, Sonar Qube)
  • DAST (Qualys, Burp Suite, OWASP ZAP, Invicti)
  • SCA, IaC scanning, container security tools
• Strong knowledge of:
  • OWASP Top 10, CWE Top 25
  • Threat modeling (STRIDE, PASTA, or equivalent)
  • API security and authentication (OAuth2, OIDC, SAML)
• Experience with:
  • CI/CD platforms (Azure Dev Ops, Git Hub Actions, Jenkins, Git Lab)
  • Cloud security (AWS, Azure)
  • Containers and orchestration (Docker, Kubernetes)
• Working knowledge of secure architecture patterns and Zero Trust principles

Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and policies. Expertise may be concentrated in one or more domains.

• Acts as a subject‑matter expert (SME) to assist various IT areas to support efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.
• Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy.
• Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards.
• Assists in the review and revisions of new and existing IT standards and policies evaluating their importance. Assists in the development of architectural metrics and reports.
• Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices.
• Performs other duties as assigned.

• Bachelor’s degree in Computer Science or related field or equivalent combination of training/education and experience.
• 3 years proven ability to transfer technology to end‑user applications/environments.
• Experience in cutting‑edge web collaboration design patterns and best practices.

• NA

• Expert in one or more technologies (Microsoft, Open Source, Database categories).
• Basic knowledge in infrastructure and networks with focus on security.
• Basic understanding of various project methodology disciplines with basic knowledge of information and systems architectures, highly proficient in website architectures.
• Basic understanding of various database platforms and data warehousing.

Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tuned with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and policies.

Expertise may be concentrated in…