Remote Application Security Architect (DevSecOps)

cigna; Bloomfield (CT); Remote; USD 156,000 - 172,000; Full time

Benefits offered by this job

Health benefits

401(k)

Paid time off

Tuition reimbursement

Job summary

The Cigna Group is seeking an application security specialist to help integrate security into the software development lifecycle. You will assist with code reviews, risk assessments, and secure CI/CD practices to protect applications across cloud environments.

Join a team focused on reducing risk and improving security across products. Telecommuting is permitted, with a competitive salary and comprehensive benefits, including health, retirement, and education support.

Qualifications

• Bachelor's degree in Computer Science or related field and 5 years of experience.
• Integrating security at every phase of the Software Development Lifecycle.
• Identifying threats and vulnerabilities early in design.
• Using SAST/DAST tools to analyze code and apps for vulnerabilities.
• Applying secure coding standards across languages (OWASP Top 10).
• Identifying, prioritizing, and remediating vulnerabilities with Nessus, Qualys, Burp Suite.
• Secure identity management including OAuth, SAML, and JWT.
• Embedding security into CI/CD pipelines (DevSecOps).
• GitHub Actions and Jenkins for DevSecOps integration.
• Cloud app security including container security.
• Assessing risk and compliance with NIST/ISO 27001.
• Detecting and responding to app-level security incidents.

Responsibilities

• Assist with security inspection of code and CI/CD deployment framework to improve speed and security.
• Serve as subject matter expert on application security in SDLC design and lifecycle.
• Perform risk assessments of services and architectures and recommend security enhancements.
• Assist with secure code reviews and AppSec assessments across development teams.
• Support automated security controls in CI/CD pipelines and DevSecOps practices.
• Educate teams on remediation of vulnerabilities detected by SAST/DAST tools.
• Establish and maintain secure coding standards and best practices.

Skills

Application security

CI/CD

DevSecOps

SAST/DAST

Nessus

Qualys

Burp Suite

GitHub Actions

Jenkins

OAuth

SAML

JWT

Education

Bachelor's degree in Computer Science

Tools

Nessus

Qualys

Burp Suite

GitHub Actions

Jenkins

Job description

The Cigna Group is seeking an application security specialist to help integrate security into the software development lifecycle. You will assist with code reviews, risk assessments, and secure CI/CD practices to protect applications across cloud environments.

Join a team focused on reducing risk and improving security across products. Telecommuting is permitted, with a competitive salary and comprehensive benefits, including health, retirement, and education support.