Info Protection Advisor-App Security Eng- Hybrid

The Cigna Group; Bloomfield (CT); À distance; USD 156 000 - 172 000; Plein temps

Avantages offerts par ce poste

Health benefits

401(k) match

Tuition reimbursement

Paid time off

Résumé du poste

The Cigna Group is seeking an Info Protection Advisor – App Security Eng to partner with Bloomfield-based software teams and guide secure design, development, and code practices for cloud-hosted and open-source apps.

You will inspect code for security issues, drive secure coding standards, and embed security into CI/CD with DevSecOps practices while enabling telecommuting where feasible.

Qualifications

• Bachelor’s degree in Computer Science or related field with 5 years of experience.
• Experience integrating security at every phase of the SDLC.
• Identify threats and vulnerabilities early in design phases.
• Use SAST/DAST tools to analyze source code and running apps.
• Apply OWASP Top 10 and SEI CERT standards across languages.
• Remediate vulnerabilities with Nessus, Qualys, Burp Suite.
• Secure identity management using OAuth, SAML, and JWT.
• Embed security into CI/CD pipelines and DevSecOps.

Responsabilités

• Assist with inspecting application code for security issues and CI/CD integration.
• Act as SME to improve security practices in product design and SDLC.
• Perform focused risk assessments of services and architectures.
• Support secure code reviews and AppSec assessments for remediation education.
• Help implement automated security controls in CI/CD pipelines.
• Educate development teams on remediation of SAST/DAST findings.
• Establish and maintain secure coding standards and practices.
• Telecommuting permitted.

Connaissances

Secure SDLC integration

Threat modeling

SAST/DAST tooling

OWASP Top 10

Nessus/Qualys/Burp Suite

OAuth/SAML/JWT

CI/CD DevSecOps

GitHub Actions

Jenkins

Cloud/container security

Formation

Bachelor’s degree in Computer Science or related field

Outils

Nessus

Qualys

Burp Suite

GitHub Actions

Jenkins

Description du poste

Cigna-Evernorth Services Inc. seeks an Info Protection Advisor – Applic Security Eng for the Bloomfield, CT location to collaborate with software development teams to lead and support Application Security activities that guide the design, development and security of code and code repositories for cloud-hosted and open-source applications.

Responsibilities

• Assist with the inspection of application code for security issues, building a new framework to help our software developers deploy faster and more securely through CI/CD Integration, or performing assessments on existing software development lifecycle practices to ensure security standards are met.
• Act as a subject matter expert on application security to improve and further integrate security best practices into product design and software development lifecycles (SDLC) of the organization.
• Perform focused risks assessments of existing or new services and technologies, security architecture, identifies design gaps, risks, and recommends security enhancements.
• Assist development teams with secure code reviews and other AppSec assessments to educate development teams on security weaknesses and vulnerabilities.
• Assist with the implementation and management of automated security controls as part of CICD pipelines and DevSecOps philosophies.
• Assist with the education of development teams on the remediation of vulnerabilities detected in SAST, SCA, and DAST security tools.
• Establish and maintain secure coding standards and best practices to provide guidance and training to development teams on security best practices.
• Telecommuting permitted.

Qualifications

• Bachelor’s degree in Computer Science or related field and 5 years of experience.
• Full term of experience must include: Integrating security at every phase of the Software Development Lifecycle;
• Identifying potential threats and vulnerabilities early in the design phase;
• Using SAST/DAST tools and techniques to analyze source code and running applications for vulnerabilities;
• Utilizing secure coding standards, including OWASP Top 10 and SEI Cert, across multiple languages;
• Identifying, prioritizing, and remediating vulnerabilities using tools including Nessus, Qualys, and Burp Suite;
• Secure identity management including authentication, authorization mechanisms, and role-based controls using tools including OAuth, SAML, and JWT;
• Embedding security into CI/CD pipelines;
• GitHub Actions for DevSecOps Integration; Jenkins for DevSecOps Integration;
• Securing applications deployed in cloud environments, including container security;
• Assessing application risk and compliance with security standards including NIST and ISO 27001; and
• Detecting, analyzing, and responding to application-level security incidents.
• Telecommuting permitted.

Salary Range: $155,958-$171,900/year

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

For this position, we anticipate offering an annual salary of 103,100 - 171,900 USD / yearly, depending on relevant factors, including experience and geographic location.

This role is also anticipated to be eligible to participate in an annual bonus plan.

At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence. For more details on our employee benefits programs, click here.

About The Cigna Group

Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you need a reasonable accommodation to complete the online application process, please email [e-mail] for assistance. Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.