Application and Data Security Principal

Who we Are  

Oncourse Home Solutions (OHS) is a people-centric, $450M organization that is owned by private equity firm, Apax Partners operating under the brands American Water Resources, Pivotal Home Solutions and American Home Solutions. We do what is right for our people so they can do their best when serving our 1.8+ million customers across the U.S. Our mission is to create lasting value for our customers and our partners by helping homeowners navigate the unexpected, reduce costs, and make homeownership enjoyable for all. Our vision is to make our products and services accessible to our customers and our partners by becoming the most trusted and reliable home solutions organization in the market. We are committed to fostering an environment that embraces diversity in all forms, where our employees, customers and partners feel valued, respected, and supported.  

As a US-based warranty provider, we provide expertise in safety and homecare to our customers. Our integrated solutions meet customer needs both inside and outside the home. Inside the home we protect critical aspects of home function such as plumbing, heating and cooling, appliances, power surges, hot water heater, and interior electrical. Outside the home we provide protection for critical lines (water, gas, wells, sewers, electric and septic). We primarily go to market B2B2C, partnering mostly with water/gas/electric utilities and municipalities to offer our product leveraging their brand for marketing and often adding our subscription fee to the water/gas/electric bill itself. When our customers need help with home maintenance, repair, or coverage, OHS is there. This is what it means to be an ‘Oncourse SUPER’—Successful, United, Progressive, Empathetic, Reliable. SUPERs get it done. We sweat homeownership so our customers and partners don’t have to. 

As an equal opportunity employer, our employment decisions are based on business needs, job requirements and individual qualifications without regard to race, color, religion, age, sex (including pregnancy), sexual orientation, gender identity, national origin, ancestry, marital status, parental status, mental or physical disability, military or veteran status, or any other basis protected by federal, state, or local law. Oncourse Home Solutions is committed to recruiting and retaining talented applicants and to providing all employees with a workplace free from discrimination and/or harassment. 

Position Summary: 

The Application & Data Security Principal role is pivotal in bridging the current security gaps and embedding security into every aspect of the technology lifecycle at OHS. This role collaborates with various teams to integrate security into applications and platforms, ensuring the safe deployment and operation of in-house-built solutions. With expertise in identity and access management, data security, threat modeling, and the secure software development lifecycle, the engineer ensures that security controls are seamlessly integrated throughout the application development process. Additionally, the role leads efforts in API security, conducts security assessments for AI systems, and continuously improves security tools and processes to address evolving threats. 

Our office environment is a key driver of our company culture and employee experience, so a regular in-office hybrid model (generally T-TH in office and M&F remote) is required.

Responsibilities include but are not limited to:   

• Develop, manage, and enforce data protection controls to ensure data security is always maintained.
• Conduct threat modeling for complex applications and platforms 
• Secure code reviews, vulnerability assessments, application security standards and guidelines 
• Deploy, manage, operate RASP, SAST, DAST, WAF, IAST 
• Develop and implement Security measures for AI systems and initiatives 
• Establish API Security Frameworks, standards, and API Security management 
• Develop and manage application & data threat modeling and lead Secure SDLC efforts including standards 
• Define Identity and access controls with regards to applications, platforms and data 
• Update and maintain relevant standards and frameworks to ensure continued safeguarding company assets including sensitive data 
• Familiarity with PCI-DSS requirement and e-commerce security requirements and establish standards to secure e-commerce platform 
• Familiarity with authentication & authorization technologies sus as OAuth, SAML, JWT, federation and drive standards for consumer platforms in alignment with business requirements 

We are Excited if this is You 

Experience and Qualifications of the Role

• Minimum 10+ years of experience with technology and at least 7-years in Information Security within cloud-native or SaaS technology environments 
• Expe