AppSec Engineer: Secure SDLC & DevSecOps

Cigna Health and Life Insurance Company; Bloomfield (CT); Remote; USD 156,000 - 172,000; Full time

Benefits offered by this job

Telecommuting permitted

Annual bonus potential

Job summary

The Cigna Group in Bloomfield, CT seeks an Info Protection Advisor – Application Security Engineer to collaborate with software development teams and lead security in code and repositories for cloud-hosted and open-source apps.

Key tasks include secure code reviews, SDLC security, CI/CD security, DevSecOps, and educating teams on vulnerabilities and remediation. Telecommuting is permitted, with emphasis on compliance and secure design across the stack.

Qualifications

• Bachelor’s degree in Computer Science or related field and 5 years of experience.
• Integrating security at every phase of the Software Development Lifecycle (SDLC).
• Identifying potential threats and vulnerabilities early in the design phase.
• Using SAST/DAST tools to analyze source code and running applications.
• Utilizing secure coding standards (OWASP Top 10, SEI CERT).
• Identifying, prioritizing, and remediating vulnerabilities with Nessus, Qualys, Burp Suite.
• Secure identity management with OAuth, SAML, JWT.
• Embedding security into CI/CD pipelines (GitHub Actions, Jenkins).
• Securing applications in cloud environments, including container security.
• Assessing risk and compliance with standards like NIST/ISO 27001.
• Detecting and responding to application-level security incidents.

Responsibilities

• Assist with inspecting application code for security issues and CI/CD security integration.
• Act as SME on application security to improve SDLC security practices.
• Perform risk assessments of services/technologies and recommend enhancements.
• Assist with secure code reviews and AppSec assessments for developers.
• Implement and manage automated security controls in CI/CD pipelines.
• Educate development teams on vulnerability remediation and tool usage.
• Establish and maintain secure coding standards and best practices.
• Telecommuting permitted.

Skills

Application security

DevSecOps

SDLC security

CI/CD integration

SAST/DAST

Secure coding standards

NIST/ISO 27001 compliance

Cloud security

Security architecture

Education

Bachelor’s degree in Computer Science or related field

Tools

GitHub Actions

Jenkins

Nessus

Qualys

Burp Suite

OAuth

SAML

JWT

Job description

The Cigna Group in Bloomfield, CT seeks an Info Protection Advisor – Application Security Engineer to collaborate with software development teams and lead security in code and repositories for cloud-hosted and open-source apps.

Key tasks include secure code reviews, SDLC security, CI/CD security, DevSecOps, and educating teams on vulnerabilities and remediation. Telecommuting is permitted, with emphasis on compliance and secure design across the stack.